Re: [PATCH] sftp-server Restricted Access

Julien Demoor wrote:
> Hello,
>
> This patch makes it possible to restrict sftp sessions to a certain
> subtree of the file system on a per-Unix account basis.

There has been a similar patch in bugzilla for a while:

http://bugzilla.mindrot.org/attachment.cgi?id=586

I'm looking at adding the ability to specify commandline arguments to
SubSystem declarations in sshd_config, but it is a little fiddly as any
change has to gracefully cope with forced commands in authorized_keys
files as well as the fairly common practice of making sftp-only accounts
by making sftp-server the user's login shell.

It will be easier when Darren's "Match" stuff is done, because we can
reuse it to do forced-commands in sshd_config.

-d

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://www.mindrot.org/mailman/listi...enssh-unix-dev