Feature request: allow chrooted directory writable by others

Phil Pennock phil.pennock at globnix.org
Wed Jul 17 05:48:29 AEST 2019


On 2019-07-15 at 12:24 +0200, Ramón García wrote:
> I am in trouble because sshd refuses to chroot to a directory that is
> writable by users other than the owner.
[...]
>                                              And when one has to work
> with a speficied directory layout, required for compatibility with
> existing applications, it makes it very hard to implement a sftp file
> server.

Have you considered using a "bind mount", or "nullfs mount", depending
upon the OS you're using?

If you have one directory layout for compatibility with one application,
you don't need to use the same layout for another application: you can
construct "views" to present the layout needed.

So you'd make a "proper" root directory, with sensible permissions,
`/dev/` and `/etc/` already existing and protected, but then use a
remapping mount ("bind" on Linux, "nullfs" on FreeBSD, other names
elsewhere) to make the tree _also_ available here.  You don't need to
let one app dictate layout and permissions to every other app.

Regards,
-Phil


More information about the openssh-unix-dev mailing list