So I need to create a ssh login for a colleague of mine that will allow him to install new things (most notably python packages) and restart services. I would be happy to give him full permissions to everything except a) few env files that have my access keys and passwords and b) elevating his permissions even more.What would be a good way to go about doing this?I'm running Ubuntu 14
How to give a user permission to everything except env files?
permissions;sudo
You can't give a user access to everything except for a few files. If they can modify the system configuration then they can change those settings and give themselves full access. If they can install services that run as root then they can install a program that will give them full access. If they can install programs that you run then they can install a program that will give out your secrets the first time you run it.If you don't trust your fellow administrators, don't store any secrets on the machine.Put your confidential files and the services that need to be co-administered on separate machines. You can of course use virtual machines or containers, they don't have to be separate physical machines. Run the co-administered services in a VM/container and give your colleague administrator access only in the VM/container.