Using SFTP

the_gripmaster · 07-08-2009, 02:14 AM

Along with the SSHD service in Linux, SFTP service also comes bundled. Now, I would like to set up SFTP service for particular users who :

can only use the SFTP service but cannot login through ssh shell (logging into the ssh shell will enable commands to be executed in the server which could be dangerous)
cannot access any other directory except his/her home directory

So, are these possible?

colucix · 07-08-2009, 02:33 AM

Quote:

Originally Posted by the_gripmaster

can only use the SFTP service but cannot login through ssh shell (logging into the ssh shell will enable commands to be executed in the server which could be dangerous)

Yes. You have to modify the user's login shell. For example:

Code:

# echo "/usr/libexec/openssh/sftp-server" >> /etc/shells
# chsh -s /usr/libexec/openssh/sftp-server username

Modify the path accordingly to your installation.

Quote:

Originally Posted by the_gripmaster

cannot access any other directory except his/her home directory

You have to setup a chrooted environment for sftp connections. Here is a tutorial about this (you will be interested only in the first part).