Re: SSH SFTP Chroot

From: Robert (me_at_privacy.net)
Date: 07/28/03


Date: Mon, 28 Jul 2003 19:37:21 +0200

Hello.
On my documentation this works only with the SSH2 Product, not OpenSSH
but I could be wrong. But the documentation is too old (OpenSSH2.1.1).
Unfortunately I have no Linux account here so I cannot verify at least
until Monday.

As a hint:
On SSH2 you would add to sshd2_config:
ChRootUsers smith[,moreAccounts,evenmore]
or
ChRootGroups users[,wheel,mygroup]
be aware that ChRootUsers only checks the primary group of an account.

To use this feature you have to copy some system files into the affected
account(s):
at least:

/bin/ls
/bin/bash
/lib/ld-linux.so.2
/lib/libc.so.6
/lib/libtermcap.so.2

I have the information that there might be more but I don't know which.

SSH2 introduced a tool named "ssh-chrootmgr" but I have no further
information.

pinguskahn <adrock@devjunky.com> wrote:

> How does one go about chrooting SSH SFTP users?
>
> -A

-- 
The Adress my@privacy.net is against spammers
and goes directly into the bin.
To contact me privately reverse and use
ed.xmg@xuniLtrebor


Relevant Pages

  • Re: chroot env using ssh2
    ... Ian Phillips wrote: ... > The specific problem I have is that users which I place in the ChRootUsers ... Is there a better way to achieve this than ssh2? ... Aren't the usual unix file permissions enough for you? ...
    (comp.unix.bsd.freebsd.misc)
  • Plain & Simple . . .
    ... We would like to use ssh2, ... I have tried to read the documentation on this and haven't seen it anywhere ... Create a hostkey. ... Put it .ssh2/authorization? ...
    (comp.security.ssh)