My step-by-step process is posted here -
https://forums.freebsd.org/threads/57935/

Basically, I do this:

sudo pkg install rssh
sudo pw groupadd -n rsshuser
sudo chown root:rsshuser /usr/local/bin/rssh
sudo chown root:rsshuser /usr/local/libexec/rssh_chroot_helper
sudo chmod 4550 /usr/local/libexec/rssh_chroot_helper
sudo pw useradd -n banks -d /usr/local/chroot/banks -g rsshuser \
-s /usr/local/bin/rssh
sudo mkdir -p /usr/local/chroot/banks
sudo chown banks:rsshuser /usr/local/chroot/banks
sudo passwd banks

sudo vi /usr/local/etc/rssh.conf

logfacility=LOG_USER
umask=022
chrootpath=/usr/local/chroot
user=banks:022:10011:/usr/local/chroot/banks

But when I test it with:
scp blah ba...@minerva.bohemia.net:/

Password for ba...@minerva.bohemia.net:
rssh_chroot_helper: wordexp() bad syntax
lost connection

The same thing also happen for:
scp blah ba...@issri.deusexmachina.org:/banks/
scp blah ba...@issri.deusexmachina.org:~
scp blah ba...@issri.deusexmachina.org:/usr/local/chroot/banks/

Curiously, with this modification to /usr/local/etc/rssh.conf

logfacility=LOG_USER
umask=022
chrootpath=/usr/local/chroot
user=banks:022:10011:
#user=banks:022:10011:/usr/local/chroot/banks

Then,

scp blah ba...@issri.deusexmachina.org:/banks/
Password for ba...@minerva.bohemia.net:
scp: /banks/: Permission denied

scp blah ba...@issri.deusexmachina.org:/usr/local/chroot/banks/
Password for ba...@minerva.bohemia.net:
blah              100%   17     0.0KB/s   00:00

That copied the file but the chroot facility isn't working. If Filezilla
is used to sftp into ba...@minerva.bohemia.net, the entire file system
can be viewed.

Any ideas?

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
rssh-discuss mailing list
rssh-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rssh-discuss

Reply via email to