|
Mike Leone via plug on 22 Sep 2026 12:36:31 -0700
|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] chroot perms confusion
|
- From: Mike Leone via plug <plug@lists.phillylinux.org>
- To: PLUG-List <plug@lists.phillylinux.org>
- Subject: Re: [PLUG] chroot perms confusion
- Date: Tue, 22 Sep 2026 15:36:27 -0400
- Arc-authentication-results: i=1; mx.google.com; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=CwlrlzUcgnW/yK3T61T1U9BeMXPp6XpxDA+kqUUxNU0=; fh=sIBjQlZ0F0acTQ0hjZdvFsYpBrqaI3D8sVI44Sn+DMM=; b=PF7wqGfrJtIuyPIXfRpTc03dqsJkGSX+P9eVpXO1rBw8NQzY0w/GC/cTsAmrAMZabm 44TTG2uwx6HbMZN4UGms0hUqAaUFjHQVvJCR3PBHnhvgwmT9aNyVSW1kFokHGOr3Sy/K xype0qEjEFFurdetrXVzU1YbpzQdkfcePtVQpHWeAYIYdSS3W6HewZhSu43EjWV2+nze rXHevF+5xEJeBMjYhOk3TDa3j819oSCVSf3ve0iHtR7wBTb8vGxNWK1rKxNKTrE91Phj Y+Zlr5G9FTYkgZ5zl5pAIe8Fx4DLv7SNpifRcGNt7cZBDNTdvNg50JYhkXN06a/b5SHN d3pw==; darn=lists.phillylinux.org
- Arc-seal: i=1; a=rsa-sha256; t=1790105787; cv=none; d=google.com; s=arc-20260327; b=XVAkj7G+UhBzNsztgOws4D2QOLcJod//8FLhkZQzOOfkNuXoJdlgT3z9h0kmdWJZFo A85DZRCXEP46x/5qsCZ8qf4XExuL6eIryJ31FIe+3jeJCPNDlxJVR5W9MEmJwLtVI+EB IC5EmN1nP5Gju2opUuv1PVpKp1Snjfogf/OTaIfKMcuc2Tkn24ObEY5X6sNSuHkkYjns 0s0Is4lYbpD96NsNU1ttJgPJSpiaWJnDb9XHij0ml25xu3/431KTcQfJ7ncPfizLTmvB TwcZKTpzXXawIAAhJO10lcP4qtfYf1eQkmtG7xVbkO1cnUDLTWU2i9ofz+qp7di6vdTM EXEA==
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mike-leone.com; s=google; t=1790105787; x=1790710587; darn=lists.phillylinux.org; h=content-type:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=CwlrlzUcgnW/yK3T61T1U9BeMXPp6XpxDA+kqUUxNU0=; b=KhW6CBgIuUF6R0cgz+dd+S7pvPXbJENXuAgsOgsAy7A2kvw15dz4VSZ8w4vW7iVIkH JYakYhMv81ZSh1pvomx9rbBpH3iLyPiKceso0aAEi5ArdFMhJyiezNpPIQvfhcjZloXx Z21Gw4PtC8k5lIV2WBgjPhYBdZWX0uRf561Wk=
- Reply-to: Mike Leone <turgon@mike-leone.com>
- Sender: "plug" <plug-bounces@lists.phillylinux.org>
Yeah, I'm an idiot ...
>
> Match Group sftpusers
> ChrootDirectory %h
> ForceCommand internal-sftp
> AllowTcpForwarding no
> X11Forwarding no
>
I had mistyped the "%h:" above, so it said "&h". That was after I had
started the email ...
Also, I had forgotten that the jail would be their home folder (so
/ftp-area/staples), which means that this folder HAD to be "chown
root:root" and "chmod 755".
Then it worked.
Since the jail is NOT writeable, I had to make a new folder - uploads
- and set that "chown staples:sftpusers" and "chmod g+w uploads".
THEN I was able to SFTP in, and upload files, but ONLY in the uploads folder.
That's a different than where they're uploading now (now, no chroot
jail, so they just upload straight into their home folder, no need of
an "uploads" folder, since their whole home folder is writeable, since
there's no chroot jail).
So that's progress, I guess. We can probably dictate this to the
external users. Heck, the server name and SSH key is changing, why not
the upload location? LOL
If anyone knows how I can get the users to start in the "uploads"
folder, as soon as the SFTP in, rather than having to do a "cd
uploads", I'm all ears ...
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug