This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: SFTP doesn't work with ChrootDirectory option set
On Nov 19 05:37, TheO wrote:
> Hi Corina,
>
> I agree with you on the fact that it's difficult to have full protection from Cygwin for ssh login.
>
> But my main concern is SFTP. What can a user do with SFTP if he is jailed in Cygwin? He can only see, upload, download files in the allowed directories using SFTP and can't execute anything. So in my opinion the risk is very low to enable jailed SFTP in Cygwin.
>
> The strange fact is that, Cygwin does allow jailed SSH but not jailed SFTP. Shouldn't it be the other way around if security is a big concern?
There's some likelihood that you did something wrong. You must copy
everything required to run sftp to the jail and then some. Cygwin
certainly doesn't exclude sftp from working because it doesn't like
the protocol...
Corinna
--
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Project Co-Leader cygwin AT cygwin DOT com
Red Hat
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/