Even more secure FTP?

[mouring at etoh.eviladmin.org]

On Fri, 15 Dec 2000, Peter van der Landen wrote:

> I want to allow technically unsophisticated users to update their web pages
> without having to resort to running something like wu-ftpd on my system.
> SFTPD is a great solution for that since even a casual user can understand
> it's user interface (The Win32 scp client is not an acceptable solution in
> this case).
> 
> SFTPD still leaves me with a few items on my wishlist that could be solved
> on the server side:
> 
> - I would prefer it if some users would be limited to SFTP access and not be
> allowed ssh interactive access or scp. (this is similar to Jos Backus'
> request posted earlier on this list).
> 
> - It would be great if a user using SFTP could (optionally and configurable
> per user) be chrooted to his homedirectory (or some other directory).
> 
Have you tried the contrib/chroot.diff ?  This would at least limit users
to their home directories.  Unsure if anyone has testested it with
SFTP.  I would but I'm kinda booked up until Monday for anything remotely
related to 'playing'.

- Ben