Difference between revisions of "Sftp chroot configuration"
Jump to navigation
Jump to search
Tags: Mobile web edit, Mobile edit |
Tags: Mobile web edit, Mobile edit |
||
Line 22: | Line 22: | ||
* %u (User) | * %u (User) | ||
* %h (home directory) | * %h (home directory) | ||
+ | |||
+ | |||
+ | Multiple users: | ||
+ | [[Match]] User USER1,USER2 | ||
+ | |||
Revision as of 18:07, 13 May 2020
/etc/ssh/sshd_config
1) First step
#Subsystem sftp /usr/lib/openssh/sftp-server Subsystem sftp internal-sftp
2) Second step
and create a user section at the end of the file (ssh can die respawning if placed after Subsystem line):
Match User john ChrootDirectory %h ForceCommand internal-sftp AllowTCPForwarding no X11Forwarding no
Others:
- %u (User)
- %h (home directory)
Multiple users:
Match User USER1,USER2
With double Match rule
Match User john LocalPort 2222 ChrootDirectory %h ForceCommand internal-sftp AllowTCPForwarding no X11Forwarding no
3) Review privileges from ChrootDirectory
directory
Logs
scp error
protocol error: mtime.sec not present
'Match LocalPort' in configuration but 'lport' not in connection test specification.
See also
Advertising: