Re: SFTP doesn't work with ChrootDirectory option set

2008-11-20 Thread Corinna Vinschen
On Nov 19 06:34, TheO wrote: > Hi Corinna, > > I tried to set ChrootDirectory to / (the root directory) which normally is > identical to "no jail" (and therefore I don't need to copy anything to > user's home directory). > > But it didn't work for SFTP; it worked for SSH though. Stracing might h

Re: SFTP doesn't work with ChrootDirectory option set

2008-11-19 Thread TheO
Hi Corinna, I tried to set ChrootDirectory to / (the root directory) which normally is identical to "no jail" (and therefore I don't need to copy anything to user's home directory). But it didn't work for SFTP; it worked for SSH though. Corinna Vinschen wrote:

Re: SFTP doesn't work with ChrootDirectory option set

2008-11-19 Thread Corinna Vinschen
On Nov 19 05:37, TheO wrote: > Hi Corina, > > I agree with you on the fact that it's difficult to have full protection from > Cygwin for ssh login. > > But my main concern is SFTP. What can a user do with SFTP if he is jailed in > Cygwin? He can only see, upload, download files in the allowed d

Re: SFTP doesn't work with ChrootDirectory option set

2008-11-19 Thread TheO
Hi Corina, I agree with you on the fact that it's difficult to have full protection from Cygwin for ssh login. But my main concern is SFTP. What can a user do with SFTP if he is jailed in Cygwin? He can only see, upload, download files in the allowed directories using SFTP and can't execute an

Re: SFTP doesn't work with ChrootDirectory option set

2008-11-19 Thread Corinna Vinschen
On Nov 18 00:02, TheO wrote: > Actually my real objective is to use chroot for SFTP. I am planning to > disable ssh login in the final configuration, I was using ssh just for > testing the sshd capability for chrooting. http://cygwin.com/acromyns/#TOFU It's not enough to have a bash in the jail

Re: SFTP doesn't work with ChrootDirectory option set

2008-11-19 Thread TheO
ny kind of cygwin wish list which I can participate in? Thanks in advance. --- On Mon, 11/17/08, Eric Blake <[EMAIL PROTECTED]> wrote: From: Eric Blake Subject: Re: SFTP doesn't work with ChrootDirectory option set To: cygwin, idgajelas Date: Monday, November 17, 2008, 9:33 PM -BEG

Fw: Re: SFTP doesn't work with ChrootDirectory option set

2008-11-19 Thread TheO
ny kind of cygwin wish list which I can participate in? Thanks in advance. --- On Mon, 11/17/08, Eric Blake <[EMAIL PROTECTED]> wrote: From: Eric Blake Subject: Re: SFTP doesn't work with ChrootDirectory option set Date: Monday, November 17, 2008, 9:33 PM -BEGIN PGP SIGNED ME

Re: SFTP doesn't work with ChrootDirectory option set

2008-11-18 Thread TheO
IL PROTECTED]> > Subject: Re: SFTP doesn't work with ChrootDirectory option set > To: cygwin@cygwin.com, [EMAIL PROTECTED] > Date: Monday, November 17, 2008, 9:33 PM > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > According to TheO on 11/17/2008 2:24 PM: > > Hi, >

Re: SFTP doesn't work with ChrootDirectory option set

2008-11-17 Thread Eric Blake
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 According to TheO on 11/17/2008 2:24 PM: > Hi, > > I have Cygwin with OpenSSH version 5.1p1-9 installed. > > I managed to make ssh with chroot to work by using ChrootDirectory in > sshd_config and copying /bin/bash to the chroot directory. chroot o