Re: Feature request: allow chrooted directory writable by others

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



Thank you all of you for your wonderful explanations

I will try to have all writting to subdirectories.

On Thu, Jul 18, 2019 at 10:55 AM Colin Watson <cjwatson@xxxxxxxxxx> wrote:
>
> On Mon, Jul 15, 2019 at 12:24:30PM +0200, Ramón García wrote:
> > Note that this is extremely restrictive in practice. Even if one is
> > very careful and only allows specific users to write (with acls)
> > openssh refuses to chroot to that directory. And when one has to work
> > with a speficied directory layout, required for compatibility with
> > existing applications, it makes it very hard to implement a sftp file
> > server.
>
> If you have very specific layout requirements, I wouldn't use OpenSSH.
> At work we have SFTP servers implemented using Twisted Conch, which lets
> us implement our own custom authentication/authorisation arrangements
> and our own virtual file system layout.  This works well for us because
> we're a Python shop, but I'm sure there are other possibilities too.
>
> --
> Colin Watson                                       [cjwatson@xxxxxxxxxx]
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev@xxxxxxxxxxx
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev




[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux