Could anyone point me in the direction of a HOWTO on configuring chroot for
openssh 2.9p2-11.7? I have need to add the capability for a few users to
access my home linux server via ssh (and then be able to ssh, scp, telnet, &
ping to other systems) without traipsing all over my system. Openssh is
working fine now, but without the chroot. I am looking for a basic guide
and process to setup the chroot jail.
OpenSSH & ChRoot ... I've been using SSH 3.2.9.1 from ssh.org/ssh.com for quite awhile now. ... Since FreeBSD uses OpenSSH as part of the install I figured I might ...ChRoot in SSH, but I want to do it, and with SSH I can. ... (SSH)
Re: sftp server with chrootdirectory setup ... After the confusing and limited 'chroot' utilities of PrivSep, which actively destabilized OpenSSH on many systems and provided no user-visible difference, the successful use of such a working chroot capability is a good thing. ... This was a problem for many years, and I'm delighted to see the features made available in this apparently effective fashion.... (comp.security.ssh)
Re: is there a market waiting to be discovered? ... Currently I am interested in chroot feature and it ... > be lots of patches for openssh but it looks like a mess out there. ... > not just chroot but there could well be other features in ssh.com ... (comp.security.ssh)
Re: Good secure file transfer, was Re: How safe are FTP servers? ... To avoid that, avoid SSH, or chroot it (which is well ...chrooting OpenSSH is possible. ... The chroot option in OpenSSH has nothing to do with restricting users... (comp.os.linux.security)
Re: How to restrict ssh user to the home directory ? ... I've done a similar thing with sftp (but that was sftp specific and not openssh really). ... OpenSSH can support chrooting, in which case you simply follow the std chroot methods. ... I'm not sure if it's an integrated compile time option or if it's a 3rd party patch, but it is an integrated compile time option on Gentoo systems, so worst case scenario if you are working with another distro, would be to patch the source and compile yourself to get this to work. ... (SSH)
