[Jailkit-dev] [bug #60178] sftp account is not limited at all on CentOS 8

[Ming Wu]

Follow-up Comment #7, bug #60178 (project jailkit):

Thanks Olivier! Problem solved. I list below all the steps that may save
others a couple of minitues if they come to this page in the future. After the
steps, user mike can sftp or scp, and only sftp or scp.

Note that all lines begin with "# " are commands typed in CentOS 8 serer as
root.

# u=mike
# adduser $u && echo "$u:$u" | chpasswd

# mkdir /srv/sftpjail
# chown root:root /srv/sftpjail
# chmod 0755 /srv/sftpjail
# jk_init -v -j /srv/sftpjail jk_lsh sftp scp
# jk_jailuser -m -j /srv/sftpjail mike

# cat /etc/passwd | grep mike
mike:x:1006:1008::/srv/sftpjail/./home/mike:/usr/sbin/jk_chrootsh

# cat /srv/sftpjail/etc/passwd | grep mike
mike:x:1006:1008::/home/mike:/usr/sbin/jk_lsh

# cat /srv/sftpjail/etc/jailkit/jk_lsh.ini
[mike]
paths= /usr/libexec/openssh/
executables= /usr/libexec/openssh/sftp-server

# cat /etc/ssh/sshd_config | tail -7
Subsystem       sftp    /usr/libexec/openssh/sftp-server
#Subsystem sftp internal-sftp
Match Group sftpgrp
        X11Forwarding no
        AllowTcpForwarding no
        ChrootDirectory %h
        ForceCommand internal-sftp

    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/bugs/?60178>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/