chroot'd SFTP

Peter Stuge
Sun, 29 Jul 2007 03:12:10 -0000

On Sun, Jul 29, 2007 at 12:46:13AM +0300, Richard Storm
wrote:
> There must be such feature in openssh out of box.

I'm not so sure..


> # useradd -d /data/p0rn -m share
>
> /etc/ssh/sshd_config:
> Match user share
>       X11Forwarding no
>       AllowTCPForwarding no
>       ForceCommand /usr/libexec/sftp-server -C %d
>
> pkill sshd; /usr/sbin/sshd
> and done :)

Couldn't one just use a wrapper script doing the equivalent of the
patch and then exec:ing sftp-server ?


//Peter