search for: restrictsftpsystobasics

...ugzilla.mindrot.org/attachment.cgi?id=2128 Patch versus 5.9p1 This patch adds the ability to restrict an sftp-server user to just basic commands such as get, put, readdir, and readlink, and prohibit mkdir, rmdir, rename, symlink, setstat and their equivalents. It comes with an sshd_config option (RestrictSFtpSysToBasics) which can be global or in a Match block. I've found it helpful, and that request occasionally comes up on the openssh-unix-dev list. Please give feedback and consider it for inclusion. Patches are attached against both 5.9p1 and openbsd's 5.9. A more advanced enhancement might let the...