I have a user set up to sftp into a server. I have set their shell to /bin/false and they cannot ssh into the server.

Once they sftp into the server they can do move around more then I want them to. Is there a way to keep them in the dir. I have the follow config in my sshd_config



Subsystem sftp internal-sftp -l VERBOSE

Match group sftponly
ChrootDirectory /chroot
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp


Based on a doc on the Redhat site i did the following

mkdir -p /chroot/ftp
mkdir /ftp
mount -o bind /ftp /chroot/ftp



The users home dir is set to /ftp

This is a very good guide that ought to cover your needs:
http://www.thegeekstuff.com/2012/03/chroot-sftp-setup/

Best regards,
HMW

Thanks that link was what I needed. The only thing I would add to that link is looking at selinux log if you have issue writing to the directory. I don't know if they disabled selinux for the tutorial but I had to run the following command based on the audit.log.

setsebool -P ssh_chroot_full_acccess 1