Linux shell to restrict sftp users to their home directories?

Question

Hiya,

I need to give SFTP access to a directory within my webroot on my server. I've set up ben_files as a user and have set his home directory to

/var/www/vhosts/mydomain.com/files

That's all fine if he connects with plain old FTP - he's restricted just to that directory, but to enable SFTP i had to add him to bin/bash shell, which suddenly opens up my entire server...

Is there a way of giving him SFTP access but without opening up all my directories? I'd really like him restricted to only his home ;)

Thanks!

Answer 1

serverfault.com might be a better place to ask?

Answer 2

You might try setting his shell to /bin/rbash

RESTRICTED SHELL If bash is started with the name rbash, or the -r option is supplied at invocation, the shell becomes restricted. A restricted shell is used to set up an environment more controlled than the standard shell. It behaves identically to bash with the exception that the following are disallowed or not performed:

   ·      changing directories with cd

plus more...

Make sure you fully understand what is allowed and disallowed before you use this.

Answer 3

Take a look at rssh. It may already be packaged for your o/s distribution.

Answer 4

Use pam_chroot.

Here is a good manual: http://www.howtoforge.com/chroot%5Fssh%5Fsftp%5Fdebian%5Fetch