This is the mail archive of the
mailing list for the Cygwin project.
Re: SFTP doesn't work with ChrootDirectory option set
- From: TheO <idgajelas at yahoo dot com>
- To: cygwin at cygwin dot com
- Date: Wed, 19 Nov 2008 02:14:36 -0800 (PST)
- Subject: Re: SFTP doesn't work with ChrootDirectory option set
Actually I am newbie to cygwin and this mailing list so first, please excuse my ignorance.
I just want to know whether this ChrootDirectory option is currently unsupported in cygwin SSH or is it just me who don't know how to use it? I googled about this particular issue and saw that there was a way to jail SFTP users in different flavors of Unix but I couldn't find a particular article which explicitely talked about cygwin port of OpenSSH.
And if it is really unsupported, what does one do usually in order to get the attention of Cygwin contributors? Is there any kind of cygwin wish list which I can participate in?
Thanks in advance.
--- On Mon, 11/17/08, Eric Blake <firstname.lastname@example.org> wrote:
From: Eric Blake
Subject: Re: SFTP doesn't work with ChrootDirectory option set
To: cygwin, idgajelas
Date: Monday, November 17, 2008, 9:33 PM
-----BEGIN PGP SIGNED MESSAGE-----
According to TheO on 11/17/2008 2:24 PM:
> I have Cygwin with OpenSSH version 5.1p1-9 installed.
> I managed to make ssh with chroot to work by using ChrootDirectory in
sshd_config and copying /bin/bash to the chroot directory.
chroot on cygwin is NOT a security measure; it is just an emulation to
ease porting. The API exists, and allows cygwin apps to recognize a
different root. But the fact remains that you can spawn a non-cygwin
program, which doesn't honor the chroot, and all files outside of the
chroot area are once again accessible. Therefore, if chroot doesn't add
security, then why should ssh, which is all about security, even try
Don't work too hard, make some time for fun as well!
Eric Blake email@example.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Cygwin)
Comment: Public key at home.comcast.net/~ericblake/eblake.gpg
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html