chroot'd SSH

[Hank Eggers]

Was wondering if anyone has successfully setup a chroot'd SSH/Sftp server?

We need to keep the user from navigating out of their home directory.

Thanks for any insight into this!

[Andrew Cowan]

I've used it in many installations and it works pretty flawlessly. As long as you have a relatively new version of OpenSSH, it expects you to have a user "sshd", and all you do is to set this user up with a home-directory in a chroot'ed jail.

[Sridhar Bhaskarla]

Hi Hank,

You will have to either install a 'chroot' patch (I don't remember on top of my head the URL) and recompile openssh or use the 'command=' feature of authorized_keys file to build a wrapper around.

-Sri

[Michael Selvesteen_2 · Accepted solution]

HP Secure Shell supports Chroot for both SSH/SFTP. Just refer release notes for installation guide.

You can use ssh_chroot_setup.sh script to
configure chroot environment for users. It can configure an user to use
1. SSH only
2. SFTP only
3. Both SSH/Sftp.

All the best