====== FreeBSD: chroot SFTP users ======
\\

configure policy for <color #22b14c>group</color>
<file bash /etc/ssh/sshd_config>
Match Group sftp-users
    ChrootDirectory /home/%u
    AllowTCPForwarding no
    X11Forwarding no
    ForceCommand internal-sftp
</file>

configure policy for <color #22b14c>single</color> user
<file bash /etc/ssh/sshd_config>
Match User sftp-test
    ChrootDirectory %h
    AllowTCPForwarding no
    X11Forwarding no
    ForceCommand internal-sftp
</file>

N.B.
\\ chown the user home <color #ed1c24>root:wheel</color> (mandatory!) 
<file bash>
chown root:wheel /home/sftp-test
mkdir /home/sftp-test/writable
chmod 755 /home/sftp-test/writable 
chown sftp-test:sftp-users /home/sftp-test/writable
pw usermod sftp-test -d /writable
</file>


---\\ return to gimbo wiki [[:start|home page]]


~~NOCACHE~~