sftp / scp and chroot - is there an easy way?[SOLVED...]

Post non-phpwcms related topics here - but I don't want to see "hey check this or that other cms". Post if you have a point or worthwhile comment, don't post just to increase you post count!
Post Reply
User avatar
update
Moderator
Posts: 6455
Joined: Mon 10. Jan 2005, 17:29
Location: germany / outdoor

sftp / scp and chroot - is there an easy way?[SOLVED...]

Post by update »

Good morning,
today I came across the following question:

Is there an easy way to offer users the possibility to use sftp / scp (with winscp for example) and keep them chrooted within their user dirs? Right now this isn't possible and a lot of information is dealing with building a chroot environment by copying a lot of files to and fro to build such a jail.

But I am looking for a possibility to achieve this without having to build such a chrooting jail, using some wrapper perhaps or an alternative shell or something like that.

With normal ftp it is quite easy but rather insecure compared to sftp / scp...

Perhaps some of you have been dealing with that already in the past and are willing to hover some hints over to me :wink:

Greetings
claus
Last edited by update on Tue 3. Jul 2007, 12:12, edited 1 time in total.
Goran
Posts: 81
Joined: Thu 27. Nov 2003, 11:43
Location: Zagreb, Croatia
Contact:

Post by Goran »

User avatar
DeXXus
Posts: 2168
Joined: Fri 28. Nov 2003, 06:20
Location: USA - Florida

Post by DeXXus »

Unqualified to answer, but came across the link below. Dunno if it applies! :oops:
http://www.unixadmintalk.com/f67/re-any ... hd-292665/
User avatar
update
Moderator
Posts: 6455
Joined: Mon 10. Jan 2005, 17:29
Location: germany / outdoor

Post by update »

Many thanks for your answers!

Thought about a patched version too and/or building virtual servers, but didn't like the need to shift around such a lot of files or patch and recompile already smoothly running applications...
Found another one by myself: http://mysecureshell.sourceforge.net
Just tested it and it seems to work - really simple to install too.
I didn't find anything about s ecurity flaws yet but as a changing root device it is doing it's job. Has a lot of possible config settings too. Hmmh... Will go on testing
Post Reply