Re: [PLUG] Setting SFTP restrictions to download only, but only for certain users

[Michael Leone <turgon@mike-leone.com>]

On Fri, Aug 7, 2015 at 10:07 AM, Michael Leone <turgon@mike-leone.com> wrote:
> On Fri, Aug 7, 2015 at 9:43 AM, Michael Leone <turgon@mike-leone.com> wrote:
>
>> NOW, for a bit of extra ... I will add my test user to it's own
>> "UpgradeProject" group. I will then see if I can do a SSH chroot jail
>> for *just* the members of that group, so they can't go snooping
>> wherever they want ..
>
>
> Oddly, I keep seing references to how using the "match" stanza in
> OpenSSH is for 4.9 and above, and I use 4.3p2 (it's RHEL 5.11). Yet I
> do see a "ChrootDirectory none" in my config file. So I guess my
> version can chroot, but I can't do it only for a "match"? All or
> nothing?


Yep, when I added the "Match Group" stanza, and restarted SSH, it came
back with "Bad configuration option: Match"

Ratz
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug