Chrooted sftp on rhel3

Carl Reynolds redhat-list at hyperbole-software.com
Fri Jun 15 16:37:10 UTC 2007


Johan Booysen wrote:
> Hi everyone,
> 
> I'm doing some tests setting up an sftp server, with setting up a chroot
> jail for ftp users.
> 
> <snip...>
> 
> Any ideas on how to restrict access so ftp users are locked into their
> own home directories - if that is even possible?  It doesn't seem like
> much of an issue to me, but I'd appreciate your thoughts.
> 
> 
> 
> 

I did this five or six years ago. I don't remember the details, but I 
can tell you it is possible to do. I seem to remember that I somehow set 
the chrootpath to /home/<user-directory> for each user. This made that 
directory the root for that user when the sign on so there is no way for 
them to cd in /home. Thus they can't see the other users' directories.

The advantage of doing it this way is that it is far less resource 
intensive than setting up a virtual machine for each user as they sign on.



Carl.





More information about the redhat-list mailing list