~]# sudo /etc/init.d/sshd restart Create Chroot Users: ~]# sudo mkdir ~]# sudo groupadd ~]# sudo useradd -s /sbin/nologin -g That’s all now create multiple users for web hosting, and offer the secure sftp access to your customers. Then restart sshd service to enable this configuration. #Subsystem sftp /usr/libexec/openssh/sftp-server Server configuration file /etc/ssh/sshd_config. Openssh Server Version: 6_3/x86_64 sshd Server Configuration:Īdd the following tail output to your Linux box’s SSH Older version supports but its tricky, please let me k now if you want to know that too.
Only thing to take care is the openssh-server version, because openssh-server-5.3p1 support SFTP chroot. Its mine Linux Box, your Linux system may vary. There are many other applications, it’s just a common example, so lets start its configuration. So it is mandatory to lock them in their home directory. But they can get access to whole system Linux tree, just for reading but still very unsecure. Why it is required? If you want to set up your Linux box as a web hosting server for its users, you may need to give SFTP access. The modified environment is called a “chroot jail”. The term “chroot” may refer to the chroot(2) system call or the chroot(8) wrapper program. A program that is run in such a modified environment cannot name (and therefore normally not access) files outside the designated directory tree. A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.
0 kommentar(er)
