How many ways to log to a Linux machine there are?
- Direct login, using connected keyboard :)
- Remote login via ssh (-Y) to console or GUI
is there any other means - defaultly allowed, or enabled in some distributions, or just commonly known - except those two ? Surely, one can replace getty with some program allowing other means of access but this is not the case.
Since we were told to create IT account with root privileges, i'd like to know how should I know what changes were made to system, what should i log or check? I've read about rootsh, but one with root can simply escape that shell. Data from last command can be cleaned. Other than that what could i do, except from informing myself via mail, that a remote login took place, and know what changed?