Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to setup a remote host to act as a data sink, i.e. some kind of environment on the remote host, A, which allows users to scp data from their local machine to A but not from A to their local machine. One account on the remote host uses rssh with scp only and works great including rsa key exchange so that the user can scp data to the remote host without a password. However, in its current form the user can also scp data from the remote host to their local host and I want to prevent that. I am aware of the possibility of setting up a chroot jail so that scp is confined to a certain directory on the remote host and that could work but I was looking for an "easier" way if possible because I don't have much experience with setting up a chroot.

share|improve this question

migrated from Mar 29 '11 at 16:49

This question came from our site for professional and enthusiast programmers.

Turn off read permissions on the files you care about for the users you don't want to be allowed to read them.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.