UNIX and Linux Applications

This would be okay if as sysadmin I was able to log in as root. If it isn't already on the system I can't add or delete files to the core. DOL computers do not give the sysadmin root capabilities. I need to find something that exists besides 'expect' or 'spawn'

OK.
Re: [ale] automating an ssh script?

What we have appears to be a really stripped down version of ssh. We have ssh capabilities but none of the modifying commands. The core files are locked down pretty tight. I may have to get ahold of DOL again and see if they can add these files for me.
They remote in to do any of the updates. I did a file search and a man on ssh and keygen. Neither are an option in the man pages, so the way this server is set up, if man can't see it and I can find it with a search, I don't have a file path to point to active and run a command. Its a secure server, used for Dept. of Labor functions for unemployment. therefore the reason for keeping a tight lid on files and capabilities. Seems I have my work cut out for me.

Thanks for trying!

Yep. I worked for the DOC and before audit we settled on the CIS L1 standard.
It sounds like you guys went way past that.
I feel your pain but admins that have root create huge problems in a naively secure environment.

Say I su root. The local syslog daemon sends a message to the central logserver (which I have no privileges on) that I have assumed root. Voila..I am accountable. After that any message from that host is not reliable...even that I've logged out. That's the gotcha.

If the level of insecurity is such that admins are allowed root or application equivalence then anything they do is a potential systems compromise.

It's about trust..and all security, large and small, is eventually about trust.