[Jailkit-dev] [bug #64649] sftp should include section jk_lsh

[N247S]

URL:
  <https://savannah.nongnu.org/bugs/?64649>

                 Summary: sftp should include section jk_lsh
                   Group: Jailkit
               Submitter: n247s
               Submitted: Sun 10 Sep 2023 09:14:03 AM UTC
                Category: None
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any


    _______________________________________________________

Follow-up Comments:


-------------------------------------------------------
Date: Sun 10 Sep 2023 09:14:03 AM UTC By: N247S <n247s>
Goodday,

I have been strugling to find the problem with getting sftp to work.

I didn't find any good tutorials or documentation to follow, appart from those
editing the 'sshd_config' file and so on. So maybe some documentation is in
order as well?

In essence most things work right from the start after a 'jk_init' call,
unfortunately not sftp.

For one the 'jk_lsh' is not included as 'includesections' in the 'jk_init.ini'
file while the sftp utility actually depends on it. I only figured it out
through watching the 'auth.log', a place most won't look for debugging.
Secondly, when using the 'jk_lsh' utility, one should edit the 'jk_lsh.ini'
file to include the allowed binaries (the sftp binaries in this case). One
sidenote is that a 'jk_update' call is required to update the config files in
a jail.

I think this is more an improvement rather than a bug? Something which can
partially be solved by editing the '.ini' files, and maybe some magic
involving auto-adding the sftp executables to the 'jk_lsh.ini' file?

Appart from that, some proper documentation on this would help a lot, since
there is not much online documenting this properly.

Kind Regards









    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/bugs/?64649>

_______________________________________________
Message sent via Savannah
https://savannah.nongnu.org/