Authentication on Untrusted Remote Hosts With Public-Key Sudo

Two common tools in Linux- and UNIX-based environments are SSH for secure communications and sudo for performing administrative tasks. These are independent programs with substantially different purposes, but they are often used in conjunction. In this paper, the authors describe a weakness in their interaction and present the solution, public-key sudo. Public-key sudo is an extension to the sudo authentication mechanism which allows for public key authentication using the SSH public key framework. The authors describe the implementation of a BSD SSH authentication module and the SSH modifications required to use this module.