non-login sftp user?

Mike Vanecek rh_list at mm-vanecek.cc
Tue Feb 24 09:10:01 UTC 2004


On Mon, 23 Feb 2004 22:17:07 -0600, Ed Wilts wrote
> On Sun, Feb 22, 2004 at 06:40:54PM -0600, Mike Vanecek wrote:
> > Does anyway exist to setup a user account that can use sftp for downloading
> > files, but cannot use ssh to login to a shell (as well as keep them locked
> > into their home directory)?
> 
> Short answer, no.  Long answer is that the openssh development teams 
> do not considered a chroot'ed environment for sftp/scp a priority.  There
> are some source hacks you can do but from the hacks I've read, 
> they're not secure.

Thanks, I thought as much.

It is a shame, because it forces one to use ftp which is quite insecure.





More information about the redhat-list mailing list