On 03/11/2014 10:45 AM, Mark Haney wrote: > It limits you to who has either > sudo access (you/do/ have root ssh access disabled, right?) or > physical access to the machine. I'd look in the logs specifically for > sudo calls. Not quite. Even if you have root access by ssh disabled, there's nothing to stop somebody from connecting via ssh as a regular user then using su.