On Wed, May 12, 2004 at 10:49:50AM -0500, Josh Trutwin wrote:
> I've set up a chroot sftp environment, I agree it's not the easiest thing 
> in the world to do, but it's also not too bad and it's solid once the 
> required files are in the required places.

How do you scale that solution up, though?  I don't want 10,000 copies
of each lib.  The only thing I can think that might work is making hard
links to the same file (soft links wouldn't work) - but i usually try to
avoid hard links like that.

> 
> I guess you can also disable shell access by setting the shell to /etc/libexec/sftp-server - Found this here: http://www.securityfocus.com/archive/121/318568/2003-04-09/2003-04-15/1
> 
> In addition to scponly, check out: http://www.pizzashack.org/rssh/ and http://chrootssh.sourceforge.net/

Thanks, i'll check out those links..
dan


_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
Help beta test TCLUG's potential new home: http://plone.mn-linux.org
Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list