AnswerBun.com

Making ChrootDirectory directory writable by SFTP user

Unix & Linux Asked by tshepang on October 30, 2020

If a user logs into a machine via SFTP, one can make use of ChrootDirectory keyword to give an illusion that user is in a root directory. But that directory is only writable by root user. I would love for this user to have such write capabilities, and it doesn’t appear that OpenSSH offers this, unless I missed something?

I am aware that that SFTP user can be given write access to any file/directory inside that ChrootDirectory, but it’s not good enough. I want the user to also create/delete the files directly under that “root” directory, without the workaround of creating a subdirectory that that user has write access to.

One Answer

I ran into the same problem with my in-house SFTP. What I did to get around this is:

Inside your sshd_config file:

Match group     sftpusers
  ChrootDirectory %h

Inside your /etc/groups file, add your sftp user to the sftpusers group (create it if it doesn't exist):

sftpusers:x:6000:user1,user2

For the ChrootDirectory, make sure you chown the directory to the following (warning be-careful of the directory that you are running this command on, make sure it is being run only on the directory that the user logs into, the -R commend means recursive, so if there are subfolder you do not wish this to command to include, remove it. Also a SFTP user should never be given access to a root level system directory like /etc, best to make a folder under something like /usr/local/alcatraz and give them access to that):

chown -R root:sftpusers userChrootDirectory

Chmod the directory to have the permission you desire, something like:

drwxrws---

If you require more information, let me know, this is just the highlights, that should get you to where you want to be.

Answered by devnull on October 30, 2020

Add your own answers!

Related Questions

Base64 encoded ignition file gets messed up

1  Asked on August 15, 2020 by michael-stbich

     

Weird textures on KDE Plasma 5.0

0  Asked on August 11, 2020 by rushisrinivas-k

     

How do I syntax check a Zsh script?

1  Asked on August 9, 2020 by akhil-jalagam

     

How can I swap my two screens, left to right?

5  Asked on August 4, 2020 by ripper234

         

Adding suffix to filename during for loop in bash

1  Asked on August 3, 2020 by mishal-ahmed

       

Why are aliases skipped if escaped?

2  Asked on August 2, 2020

     

Why can’t I type a g̃ the same way I type ñ?

1  Asked on July 29, 2020 by mmaluff

         

Custom logrotate with hostnames

0  Asked on July 29, 2020 by gwynn

     

Ask a Question

Get help from others!

© 2022 AnswerBun.com. All rights reserved. Sites we Love: PCI Database, MenuIva, UKBizDB, Menu Kuliner, Sharing RPP