Tying WinSCP logins to specific directory

tiedyeguy64 · 02-16-2011, 11:41 AM

We have a Debian Lenny / Samba server sharing files on a LAN with Windows clients. We also have several remote users who login in via WinSCP to do simple file transfers. (A OpenVPN was too slow due to bandwidth issues.)

Is there a way to lock the WinSCP connections to a specific directory?

My first thought was to move the remote users' home directory to the portion of the directory tree shared via Samba:

usermod -d /data/public/ username

but that does not stop them from going up the directory tree.

Thanks.

TB0ne · 02-16-2011, 12:01 PM

Quote:

Originally Posted by tiedyeguy64

We have a Debian Lenny / Samba server sharing files on a LAN with Windows clients. We also have several remote users who login in via WinSCP to do simple file transfers. (A OpenVPN was too slow due to bandwidth issues.)

Is there a way to lock the WinSCP connections to a specific directory? My first thought was to move the remote users' home directory to the portion of the directory tree shared via Samba:

usermod -d /data/public/ username

but that does not stop them from going up the directory tree.
Thanks.

What you're looking for is a chroot'ed SCP environment. This:
http://www.howtoforge.com/chroot_ssh_sftp_debian_etch

is a bit dated, but will definitely get you going.