[sllug-members]: sftp/ssh shell chroot(ing)

[Colby W.]

On Tue, Apr 1, 2008 at 10:46 AM, David Miller <ldm3rd at yahoo.com> wrote:
> I was wondering if anyone has had any experience doing
>  sftp/ssh in chroot using the 'NEW' way?  By new way,
>  I've read somewhere (lost where it was dang it! :@)
>  that the openssh suite now has an option in the
>  sshd.conf file that will do this without having to get
>  all the libs, make the needed dirs, etc.. and putting
>  them into the jail.
>
>  I've got an aging server with 1500+ users that uses a
>  very old commercial sftp program (without chroot, it
>  uses an ssh-dummy shell basically).  The company
>  doesn't want to fork out for the commercial version
>  again, however making a chroot jail for each user with
>  their own libs, etc would be a royal PITA ;) not to
>  mention applying updates when they come along.
>
>  Thanks in advance for your help.

openssh.org and undeadly.org have info on it. As do the OpenSSH
mailing list archives. I don't know anybody who has implemented the
chroot options now available, it was afterall, released only
yesterday. :)

 --- Colby