From owner-freebsd-questions@FreeBSD.ORG  Tue May 25 21:29:58 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D071E1065670
	for <freebsd-questions@freebsd.org>;
	Tue, 25 May 2010 21:29:58 +0000 (UTC)
	(envelope-from matt@webcontracts.co.uk)
Received: from batfink.vm.bytemark.co.uk (batfink.vm.bytemark.co.uk
	[80.68.95.231]) by mx1.freebsd.org (Postfix) with ESMTP id 9560B8FC1E
	for <freebsd-questions@freebsd.org>;
	Tue, 25 May 2010 21:29:58 +0000 (UTC)
Received: from www.webcontracts.co.uk (localhost [127.0.0.1])
	by batfink.vm.bytemark.co.uk (Postfix) with ESMTP id 0286464100
	for <freebsd-questions@freebsd.org>;
	Tue, 25 May 2010 22:29:56 +0100 (BST)
Received: from 212.159.19.37 (SquirrelMail authenticated user mlaw)
	by www.webcontracts.co.uk with HTTP; Tue, 25 May 2010 22:29:57 +0100
Message-ID: <933e7d04f535bbe649f089f9deb60284.squirrel@www.webcontracts.co.uk>
Date: Tue, 25 May 2010 22:29:57 +0100
From: "Matthew Law" <matt@webcontracts.co.uk>
To: freebsd-questions@freebsd.org
User-Agent: SquirrelMail/1.4.19
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Subject: chroot scp only network storage?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: matt@webcontracts.co.uk
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 25 May 2010 21:29:58 -0000


I want to provide some users with secure network attached storage over
SCP.  The intent is to provide people with a similar thing to, e.g.
rsync.net but inside of our network only.

Security is obviously a priority so I would like each user to be chrooted
into their allocated directory and allow them only to execute a small set
of commands.

I have come across scponly before.  Is this the best way of achieving this
with FreeBSD or is there some other better way?

Thanks in advance,

Matt.