[Gllug] SFTP and chroot

Andy McGarty andy at mac1systems.com
Sun Apr 10 21:35:15 UTC 2005


On Sun, 10 Apr 2005 22:30:24 +0100, Simon Morris <mozrat at gmail.com> wrote:

> Hello,
>
> I have a server that is hosted remotely and I would like to provide
> sftp access for some other users.
>
> Google tells me I can restrict these people to sftp only (i.e. no
> login environment or bash shell) by adding /usr/lib/sftp-server to
> /etc/shells and setting that as the users default shell.
>
> I haven't tested this bit yet - is it the most effective way to
> restrict a user to sftp access only?
>
> Also google tells me there is no way to chroot users to their home
> directory over SSH without patching and rebuilding sshd.... is that
> also true?
>
> My objective is to allow certain users sftp access *only* and have
> them chrooted to ~ using the path of least resistance :)
>
> Distro is Debian Sarge.
>
> TIA
>
> ~sm
You can use AllowUsers in your sshdconfig to only only ssh access to  
certain users.

Andy


-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list