chroot to dir per user?

Damien Miller djm at mindrot.org
Fri Oct 23 08:32:39 EST 2009


On Thu, 22 Oct 2009, K?rlis Repsons wrote:

> On Thursday 22 October 2009 20:39:56 Damien Miller wrote:
> > On Thu, 22 Oct 2009, K?rlis Repsons wrote:
> > > Hi there,
> > >
> > > let me just ask if you know some good way to set up user chrooting in
> > > such a way, that each sftp user has its chroot directory entry somewhere
> > > (whatever path) and gets chrooted there upon its login? Maybe such
> > > feature is planned? Thanks...
> >
> > Yes, read the sshd_config(5) manpage and search for ChrootDirectory.
> 
> ChrootDirectory together with Match, right? Perhaps awfully wrong for some 
> reason, but what would happen, if chroot target directory/its contents 
> wouldn't be root owned? For allowing some users/groups sftp access only to 
> their content it seems logical and usable, that they own those directories... 
> Is it then a dead end?

https://bugzilla.redhat.com/show_bug.cgi?id=522141 is what happens when this
restriction is relaxed.

-d


More information about the openssh-unix-dev mailing list