Archive for the 'SysAdmin' Category

Jailed (chroot) SFTP server

December 01st, 2007 | Category: SysAdmin

I was FINALLY able to set up a jailed SFTP server. This basically has circumvented one of OpenSSH’s drawbacks as a secure protocol. Normally, a user accessing the server via SFTP can have full read-only access to the entire server. Needless to say, this can be a security risk (a major one at that). What this patch does is restricts a “sftp” user to its home directory and restricts access to SFTP only (i.e. no interactive SSH sessions).

Thanks to Mads Madsen and Minstrel for helping me set up a chroot-ed SFTP server running on Ubuntu 7.10
Check out the Ubuntu guide HERE

Minstrel’s original guide can be found HERE. This might be useful for anyone else running other flavors on *nix.

No comments