I'm trying to setup a chroot jail, but I'm not sure how to make this work in SSH and SFTP. A quick question, will something like this work for both SSH and SFTP or just SSH? If it doesn't work for both, how can I setup a chroot jail (or an alternative) to do so?
Add a comment
|
1 Answer
If SSH does a chroot, then it will be effective for all processes started by SSH.
answered Aug 18, 2018 at 21:14
-
So the answer is no?APixel Visuals– APixel Visuals2018-08-19 04:16:07 +00:00Commented Aug 19, 2018 at 4:16
-
@apxx since SFTP is handled by SSH, the answer is yes. In the post you linked, the accepted answer sets up an SFTP jail, disabling general SSH (note the
ForceCommand internal-sftp). For general SSH access as well, you'd need something like unix.stackexchange.com/a/9854/70524.muru– muru2018-08-19 05:00:14 +00:00Commented Aug 19, 2018 at 5:00