Hi,

I'm trying to set up a box such that normal users are chroot'd to their home
directories, and can only use sftp. I have added this to the config file &
restarted sshd:


r...@container ~> tail /etc/ssh/sshd_config
#
#
#
# all non-wheel users should be chrooted to their home and sftp only
#
Match Group !wheel
ForceCommand internal-sftp
ChrootDirectory %h
AllowTcpForwarding no
X11Forwarding no


However normal users are still not chrooted, and can still ssh into the box.
Any clues what I'm doing wrong ? Google seems to hint that the chroot
directory might have to be owned by root, but that seems strange, since users
couldn't then write files in their own home ?


/Pete

Reply via email to