Hi,

I was just doing some chrooted sftp work and I've
thought it would be nice if sshd_config's 'ChrootDirectory'
and sftp-server '-d - start directory' would support
more sofisticated token format like smtpd.conf states.

I could imagine following would be useful for sftp
hosting providers:

Match Group sftp
        X11Forwarding no
        AllowTcpForwarding no
        PermitTTY no
        ForceCommand internal-sftp -d %u
        ChrootDirectory /home/sftp/%{u[0]}/%u

ChrootDirectory would for user 'foo' expand to:

  /home/sftp/f/foo

and a sftp user would be switched to:

  /home/sftp/f/foo/foo

This way a hosting provider could easier define
more sofisticated sftp homedirs.

Sorry, I'm not able to provide diffs :(

jirib

Reply via email to