Date: Wed, 8 Dec 2010 22:24:27 +0000 From: krad <kraduk@gmail.com> To: joseph.bashe@gmail.com Cc: Chris Brennan <xaero@xaerolimit.net>, jail@freebsd.org, questions <questions@freebsd.org>, owner-freebsd-jail@freebsd.org, "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net> Subject: Re: FTPD not working properly on jail Message-ID: <AANLkTim8Tk1meZ1SvZUZGaF%2BPcVsauXR8bEg1U8Dt3ih@mail.gmail.com> In-Reply-To: <1865384339-1291839108-cardhu_decombobulator_blackberry.rim.net-1153938124-@bda947.bisx.prod.on.blackberry> References: <AANLkTimWJn3SDLpOWCFw3pDByfutuLiNTgbmWFfFkMJg@mail.gmail.com> <20101208155125.E6126@maildrop.int.zabbadoz.net> <AANLkTi=fc_gO%2B3KMjrjXiX2TATQS=-qA2r%2B9r11SYMag@mail.gmail.com> <20101208163047.S6126@maildrop.int.zabbadoz.net> <AANLkTi=qASzkAofrBtshSx6158eYpZV8kmF2dyouS8Un@mail.gmail.com> <AANLkTin4v8SFP_d2VJ7%2Bd5Ryz-Z6Zp4D9VRswkqjaiAx@mail.gmail.com> <AANLkTinYYCF=07zDhxGZyX-JY5=AhmjTSx_E4Jp0SQgC@mail.gmail.com> <AANLkTinQWCorCkMT98gSExW8OB=gVuJnT7Ei44fEdzOj@mail.gmail.com> <1865384339-1291839108-cardhu_decombobulator_blackberry.rim.net-1153938124-@bda947.bisx.prod.on.blackberry>
next in thread | previous in thread | raw e-mail | index | archive | help
On 8 December 2010 20:07, Joseph Bashe <joseph.bashe@gmail.com> wrote:
> But he mentioned he needs some sort of 'virtual' (I'm assuming chroot)
> feature; this is not possible with sftp afaik.
> .
>
Its totally possble to chroot the sftp, and I have done it several times.
Something like the below will isolate each user
Match Group sftponly
ChrootDirectory /home/chroot/%u
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
he might need something more like this so they can share data
Match Group sftponly
ChrootDirectory /home/chroot/
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTim8Tk1meZ1SvZUZGaF%2BPcVsauXR8bEg1U8Dt3ih>