I want to be able to use SFTP to edit files that require root permissions.
I'm using SSH Key based authentication - rsa key on smart card.
If the system requires sudo to perform root level commands, How do I get around this?
Can I create a way of bypassing sudo for SFTP only?
Is there a way to keep sudo & key authentication.
I'm using windows to connect to Ubuntu. I need this to work with Mac connecting to Ubuntu as well.
I understand how to do SSH Tunneling to admin the system services. Currently, I use root user login directly, but password login is disabled. I didn't understand how to use sudo and SFTP at same time. It seems to be a best practice to require login as a non-root user and then require use of sudo since the logs will record who was given escalated privileges for each command.
Should I concern myself with this when using Key based authentication or is this a trivial difference in security/logging? It seems like Key based authentication records user's serial number in the logs, and you can have multiple keys for the root user to identify each user. This seems to be the same effect as using sudo to me. Am I wrong?