SFTP and Chroot

[axman505]

Hello,

I was doing some online reading, and it looks like there is no built in way to chroot users over sftp. Is this still the case? I would prefer to not have to install any patches unless it is the only way to make it work.

Comments are welcome. Thanks.

 

[lullysing]

I know OPENBSD runs the apache deamon under a chroot jail, and it's possible to do something like this with any kind of service, with some hacking ( ymmv ).

there was a mention of it in slashdot, lemme find that document i printed about how jailed httpd works...
*scounges and googles a bit*

http://www.etc.msys.ch/docs/chrooted_httpd.pdf

Read, absorb and adapt to your needs with the ftp server.

--Dave

 

[fluid11]

I don't know if this works or not, but google turned up this link...

http://archives.neohapsis.com/archives/sf/linux/2001-q4/0263.html

ChrisP
RHCE, LPIC-1, CCNA, CNE, MCSE, +10 others

 

[aixmurderer]

It's actually quite easy, but you will need a package called "scponly"

It takes a bit of hacking and finetuning, but works 100%.

IBM Certified Confused - MQSeries
IBM Certified Flabbergasted - AIX 5 pSeries System Administration
MS Certified Windblows Rebooter

 

[axman505]

Is there a way to use vsftp along together with ssh/scp?

 

[aixmurderer]

Not what I'm aware of, the sftp/scp functionality is provided by the sshd subsystem, whereas regular ftp will be taken care of by vsftp.

IBM Certified Confused - MQSeries
IBM Certified Flabbergasted - AIX 5 pSeries System Administration
MS Certified Windblows Rebooter