小企鵝開談 : [轉貼]把 SFTP 關起來 (CHROOTED)

groupadd sftponly

useradd -s /bin/false -G sftponly test
passwd test
chown root /home/test

# override default of no subsystems
#Subsystem      sftp    /usr/libexec/openssh/sftp-server
Subsystem       sftp    internal-sftp

# Example of overriding settings on a per-user basis
#Match User anoncvs
#       X11Forwarding no
#       AllowTcpForwarding no
#       ForceCommand cvs server
Match Group sftponly
ChrootDirectory /home/%u
X11Forwarding no
AllowTCPForwarding no
ForceCommand internal-sftp

service sshd restart