topic chroot'd SSH in Operating System - HP-UX

chroot'd SSH

Hank Eggers — Thu, 07 Oct 2004 15:58:51 GMT

Was wondering if anyone has successfully setup a chroot'd SSH/Sftp server?

We need to keep the user from navigating out of their home directory.

Thanks for any insight into this!

Re: chroot'd SSH

Andrew Cowan — Fri, 08 Oct 2004 02:02:32 GMT

I've used it in many installations and it works pretty flawlessly. As long as you have a relatively new version of OpenSSH, it expects you to have a user "sshd", and all you do is to set this user up with a home-directory in a chroot'ed jail.

Re: chroot'd SSH

Sridhar Bhaskarla — Fri, 08 Oct 2004 04:13:22 GMT

Hi Hank,

You will have to either install a 'chroot' patch (I don't remember on top of my head the URL) and recompile openssh or use the 'command=' feature of authorized_keys file to build a wrapper around.

-Sri

Re: chroot'd SSH

Michael Selvesteen_2 — Fri, 08 Oct 2004 12:22:27 GMT

HP Secure Shell supports Chroot for both SSH/SFTP. Just refer release notes for installation guide.

You can use ssh_chroot_setup.sh script to
configure chroot environment for users. It can configure an user to use
1. SSH only
2. SFTP only
3. Both SSH/Sftp.

All the best