Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've followed the myriad of tutorials/instructions to setup a CHROOT'ed/Jailed SFTP account, and it works great.

However, I need the user accounts to be able to have full write access to their home directory.

For reference, I followed these instructions to setup the SFTP access for this user: http://woodel.com/domore/sftp/

The final settings ask for: the user's home directory chown root:root & chmod 755

And the following settings in the sshd config file:

Match Group sftpusers
AllowTCPForwarding no
ChrootDirectory %h
ForceCommand internal-sftp

However, my sftpusers cannot create files in their home directory, only in sub-directories with all the proper permissions setup for that user. One of these users is an automated system that does not have an easy means of designating a sub-directory, so I need this account to have access to write into it's default/root directory.

I do not currently have SELinux enabled & do not know anything about it, but have seen some mention of being able to enable this functionality that way, but I don't know what else will be affected if I enable it.

Any ideas/directions are appreciated.

share|improve this question
    
The more I look into this, it's not looking like there's a good way to chroot an SFTP user to their home directory AND give them write access to that root (their home dir). –  Thomas Smith Apr 15 '13 at 20:26

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.