ChrootDirectory on a per key basis

[Peter Stuge]

Damien Miller wrote:
> > > or even better, could a 'chrootdir' option be added to the
> > > Authorized keys format?
> > 
> > Yes. I think this will be the easiest to implement. Give it a shot.
> > Infrastructure is in place also for passing a value from options in
> > authorized_keys.
> 
> No, letting users chroot to arbitrary directories introduces
> serious security problems.

Thanks - this is an important point!

I was thinking about (and hope the OP did too) a case where
authorized_keys is not user writable, but always controlled by
the adminstrator.


//Peter