openssh bugs - Mar 2008 - [Bug 177] provide chroot option for sftp-server

https://bugzilla.mindrot.org/show_bug.cgi?id=177


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added                       
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED                      




--- Comment #16 from Damien Miller <djm at mindrot.org>  2008-03-31
15:19:42 ---
Fix shipped in 4.9/4.9p1 release.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=177


yezkvisvadk at mailinator.com changed:

           What    |Removed                     |Added                       
----------------------------------------------------------------------------
                 CC|                            |yezkvisvadk at mailinator.com  




--- Comment #17 from yezkvisvadk at mailinator.com  2008-04-08 04:47:28 ---
Out of curiosity, could you summarize the reasons that the sftp-server
level chrooting was discarded in favor of sshd ChrootDirectory? At
first look it seems better to have a small sftp-server process running
than the full blown sshd, to provide this functionality. 

Thanks in advance.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=177





--- Comment #18 from Damien Miller <djm at mindrot.org>  2008-04-08
09:05:16 ---
Huh? You need sshd running anyway.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=177





--- Comment #19 from yezkvisvadk at mailinator.com  2008-04-08 22:12:33 ---
I guess I was not clear. Why have the sftp-server embedded, risking
bugs in the full blown sshd code, and not just fork the simple
sftp-server and perform the chroot there (like your patch in this bug
does)? What were the reasons the first solution was prefered? In the
first comments you mention some things but I don't quite understand.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching someone on the CC list of the bug.