sftp and scp and chroot

2006-03-21 Thread Alexey E. Suslikov
Michael Schmidt wrote: Why may ssh be broken down when jailkit is used? chrooting ssh is DANGEROUS. it was discussed many times. search archives.

Re: sftp and scp and chroot

2006-03-21 Thread Paul Pruett
there is better alternative w/o need to breaking ssh down: An alternative to jailkit is chrsh http://www.adg.us/computers/chrsh.html it also does not require changing any code in ssh, it is a chroot jail wrapper, invoked by setting user's shell to the wrapper. (warning - warning - if you inc

sftp and scp and chroot

2006-03-21 Thread Alexey E. Suslikov
Michael Schmidt wrote: After having done a bit more researching I have seen that there is a kit called jailkit, its website is: http://olivier.sessink.nl/jailkit/ Who on this misc mailing list knows jailkit? Which experiences did you make with it? How secure is it? search in archives for an

Re: sftp and scp and chroot

2006-03-21 Thread Michael Schmidt
Alexey E. Suslikov wrote: Michael Schmidt wrote: http://olivier.sessink.nl/jailkit/ Who on this misc mailing list knows jailkit? Which experiences did you make with it? How secure is it? there is better alternative w/o need to breaking ssh down: Why may ssh be broken down when jailkit is us

Re: sftp and scp and chroot

2006-03-21 Thread Michael Schmidt
Tobias Ulmer wrote: On Mon, Mar 20, 2006 at 05:35:31PM +0100, Michael Schmidt wrote: I am looking for both sftp and scp configurations where client users are forced into chroot jails from where they cannot escape from and cannot break. Look at scponly. However, do not enable additional

Re: sftp and scp and chroot

2006-03-20 Thread Tobias Ulmer
On Mon, Mar 20, 2006 at 05:35:31PM +0100, Michael Schmidt wrote: > Hello, > > OpenBSD version 3.8 > Architecture i386 > > After having read several man pages and faqs I have found nothing > describing sftp jailed by chroot and scp jailed by chroot. > I am looking for both sftp and scp configurat

sftp and scp and chroot

2006-03-20 Thread Michael Schmidt
Hello, OpenBSD version 3.8 Architecture i386 After having read several man pages and faqs I have found nothing describing sftp jailed by chroot and scp jailed by chroot. I am looking for both sftp and scp configurations where client users are forced into chroot jails from where they cannot esc