On Thu, Nov 30, 2017 at 05:36:57PM -0600, Edgar Pettijohn wrote: > I was looking into how best to secure a sftp-server. The manual > mentions a -Q option to query protocol features supported. I added the > following line to sshd_config. > > Subsystem sftp /usr/libexec/sftp-server sftp -Q requests > > So far I'm not sure how to get at the information provided by this > command line option. Or am I doing it wrong? > > Any insight is greatly appreciated. > > Edgar
IMO you got confused, it is "query", it does not set anything. Output of "-Q requests" as "requests"/actions which sftp client can do on remote server. An example: you want to mimic anon ftp upload server, then you would - IIRC - open, write, lstat,... but not readdir, remote, symlink etc... j.

