Comments on: How to Restrict SFTP Users to Home Directories Using chroot Jail

By: nh

nh — Tue, 07 Mar 2023 21:32:10 +0000

Another case I couldn’t find anywhere…

How to set a separate directory entry when they log in with the above configuration all users are pointing to the same directory (whatever is mentioned in the chrootdirectory).

We have different clients logging into sftp and they need to be on different directory access.

By: Stephan

Stephan — Mon, 20 Jun 2022 18:35:22 +0000

Hmm, All is well and good but when it comes to set: 'ForceCommand internal-sftp' or 'Match Group SFTP' (any of these!) and I restart ssh, I'm getting "Failed to start OpenBSD Secure Shell server".

By: Ahmad

Ahmad — Thu, 16 Dec 2021 09:41:37 +0000

Hi,

I have done all the steps above, but after i log in using:

# sfpt user@ip
# cd /

I could see all the file systems!

By: Anonymous

Anonymous — Wed, 06 Oct 2021 19:04:51 +0000

“adduser tecmint -g sftpgroup -s /sbin/nologin”

It is not working for me.

Even with this command:

usermod -G webdev danielm
--shell /sbin/false danielm

Error: FATAL ERROR: Connection reset by peer
Error: Could not connect to a server

Thats outdated i think.

By: Jarvis

Jarvis — Wed, 22 Sep 2021 18:22:14 +0000

Good Article.

Have a question though, by doing the above steps, I see we could see the chroot jailed folder, after logging in. For a user, if he tries to log in, is it possible to show the complete path of the jailed folder, in this case, it would be, /sftpusers/chroot/tecmint/?

Also by doing chroot jail, we are restricting every user to access only the assigned folder. Is it possible to have an admin kind of user, who could access these folders, and download the files and remove them?