I'm trying to set up a secure server for file uploading and downloading and was looking for a little help. I know that SFTP is essentially part of the SSH shell server already installed on the box, but I guess I need a push in the right direction as to how I can restrict the access to our server. I've heard that you can use restricted shells to force a user only to their home directory, but I've also heard that these are reasonably easy to defeat. More or less, I'd like to be able to create a few dirs in each user's home directory, and possibly add a few soft links so they could access other dirs if need be.

Does anyone have suggestions or a tutorial that's an easy way to set this up? Although these users would be our company's clients, I certainly don't want them "snooping around" the rest of the server; hence, restricting them to their home directory or a few folders I designate.

Thanks!


-Cliff