Caging sftp users in SuSE 10.3?

2010-10-20 Thread Mrohs, Ray (JMD)
Hi All, Is there a way to restrict scp and sftp users to their own directories in 10.3? The ChrootDirectory option in sshd_config is only available as of SLES 11. Ray Mrohs U.S. Department of Justice 202-307-6896 -- For

Re: Caging sftp users in SuSE 10.3?

2010-10-20 Thread Mark Post
On 10/20/2010 at 11:07 AM, Mrohs, Ray (JMD) ray.mr...@usdoj.gov wrote: Hi All, Is there a way to restrict scp and sftp users to their own directories in 10.3? The ChrootDirectory option in sshd_config is only available as of SLES 11. Not that I'm aware of. Be aware that the chroot

Re: Caging sftp users in SuSE 10.3?

2010-10-20 Thread David Boyes
Is there a way to restrict scp and sftp users to their own directories in 10.3? The ChrootDirectory option in sshd_config is only available as of SLES 11. Not that I'm aware of. Google for scponly. You'll find a couple articles describing how to do this pre-sshd v5. -- db

Re: Caging sftp users in SuSE 10.3?

2010-10-20 Thread Christopher Cox
Not sure... it might be possible using AppArmor somehow. I know that sftp can use the a subsystem executable and in theory a copied sftp-server backend subsystem with some kind of AppArmor logic might do the trick. Just thinking out loud. From: Mrohs, Ray (JMD) ray.mr...@usdoj.gov To:

Re: Caging sftp users in SuSE 10.3?

2010-10-20 Thread Andrej
On 21 October 2010 04:07, Mrohs, Ray (JMD) ray.mr...@usdoj.gov wrote: Hi All, Is there a way to restrict scp and sftp users to their own directories in 10.3? The ChrootDirectory option in sshd_config is only available as of SLES 11. Not SuSE specific... one of our requirements was to have