On Wed, 12 May 2004 10:04:32 -0500
Dan Rue <drue at therub.org> wrote:

> My problem with sftp is that it's harder to chroot - that and I
> don't want to give users shell access.  The only solution I've found
> is scponly shell - http://www.sublimation.org/scponly/

I've set up a chroot sftp environment, I agree it's not the easiest thing in the world to do, but it's also not too bad and it's solid once the required files are in the required places.

I guess you can also disable shell access by setting the shell to /etc/libexec/sftp-server - Found this here: http://www.securityfocus.com/archive/121/318568/2003-04-09/2003-04-15/1

In addition to scponly, check out: http://www.pizzashack.org/rssh/ and http://chrootssh.sourceforge.net/

Josh

_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
Help beta test TCLUG's potential new home: http://plone.mn-linux.org
Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list