On Nov 19 05:37, TheO wrote: > Hi Corina, > > I agree with you on the fact that it's difficult to have full protection from > Cygwin for ssh login. > > But my main concern is SFTP. What can a user do with SFTP if he is jailed in > Cygwin? He can only see, upload, download files in the allowed directories > using SFTP and can't execute anything. So in my opinion the risk is very low > to enable jailed SFTP in Cygwin. > > The strange fact is that, Cygwin does allow jailed SSH but not jailed SFTP. > Shouldn't it be the other way around if security is a big concern?
There's some likelihood that you did something wrong. You must copy everything required to run sftp to the jail and then some. Cygwin certainly doesn't exclude sftp from working because it doesn't like the protocol... Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader cygwin AT cygwin DOT com Red Hat -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
