using OpenSSH/SFTP to replace an FTP server securely
    IMAP List Administration 
    lists at y42.org
       
    Wed May 21 00:33:27 EST 2014
    
    
  
I thank everyone for their helpful suggestions.
On 05/20/2014 09:32 AM, Damien Miller wrote:
> On Mon, 19 May 2014, ?ngel Gonz?lez wrote:
>
>> If you want something different, like chrooting them at /chrooted-users/foo,
>> you
>> can use -d parameter in the ForceCommand, ie.
>>  ForceCommand internal-sftp -d /%u
> If you're willing to live with a single chroot directory and file
> permissions to keep users from each others' files then this is a great
> solution. It only requires a single /chrooted-users/dev/log listener
> too.
Indeed, I am willing.  I was just pulling my hair out because sshd wasn't
chdir'ing into the home directory, and the "-d" option didn't work either.
Eventually it occurred to me that v5.3 might not have that stuff, so I had a
look in the source, and indeed, it's not there.
I got v6.6p1 and compiled/installed it, and now sshd changes to the home
directory after doing the chroot.  Much better.
Thanks again for the help.
cheers,
Rob
    
    
More information about the openssh-unix-dev
mailing list