Vesta Control Panel - Forum

Community Forum

Skip to content

Advanced search
  • Quick links
    • Main site
    • Github repo
    • Google Search
  • FAQ
  • Login
  • Register
  • Board index Main Section General Discussion
  • Search

SFTP

General questions about VestaCP
Post Reply
  • Print view
Advanced search
2 posts • Page 1 of 1
Ocrion
Posts: 11
Joined: Tue Nov 12, 2013 6:31 pm

SFTP
  • Quote

Post by Ocrion » Tue Nov 12, 2013 6:37 pm

Hello!

I've been experimenting with VestaCP for a few days now and I absolutely adore it!

However, I experience one small issue, I'd like my users to use SFTP.
So I grant them the rssh option so they're able to login with SFTP
Image
It works BUT, I want them to be restricted to their home directory (Like "/home/$USER/web/") because as of right now they can go out of their home directory and see all everything on the system and that's not anything I appreciate...

This is my current vsFTPd config:

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=002
anon_upload_enable=NO
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
chroot_local_user=YES
listen=YES
pam_service_name=vsftpd
userlist_enable=NO
tcp_wrappers=YES
force_dot_files=YES
ascii_upload_enable=YES
ascii_download_enable=YES
#allow_writable_chroot=YES
allow_writeable_chroot=YES
seccomp_sandbox=NO
pasv_enable=YES
pasv_max_port=12100
pasv_min_port=12000
user_sub_token=$USER
local_root=/home/$USER/web/

I've also tried to add the text below to the /etc/ssh/ssh_config without success.

Match Group sftp-only
ChrootDirectory %h
ForceCommand internal-sftp
AllowTcpForwarding no


Kind regards,
Ocrion.
Top

skid
VestaCP Team
Posts: 1476
Joined: Wed Apr 06, 2011 11:12 pm

Re: SFTP
  • Quote

Post by skid » Tue Nov 12, 2013 9:35 pm

Chrooting with rssh is kinda tricky. Unfortunately, I didn't managed to get it work properly. But maybe you are more lucky try to google "rssh chroot jail".
Top


Post Reply
  • Print view

2 posts • Page 1 of 1

Return to “General Discussion”



  • Board index
  • All times are UTC
  • Delete all board cookies
  • The team
Powered by phpBB® Forum Software © phpBB Limited
*Original Author: Brad Veryard
*Updated to 3.2 by MannixMD
 

 

Login  •  Register

I forgot my password