Re: sftp requests don't go via rssh

[Russ A. <ea...@ey...>]

Petyo Vodenicharov <pi...@gm...> writes:

> I've setup rssh to what seemed to be a proper configuration but I
> noticed that sftp doesn't go at all via rssh. And therefore doesn't go
> in the chroor jail.It just goes via the default sftp module of ssh.

> the sshd_config has only this about sftp:
> Subsystem       sftp    internal-sftp

When you use subsystem support for sftp, I believe the sshd server never
runs a shell or uses the command sent by the client.  It instead spawns
the sftp server directly or uses the internal built-in sftp
implementation.  You would therefore have to configure sshd's internal
chroot support.  rssh can't help with that.

I believe you can force the sftp client and sshd server to fall back to
running the sftp server command via a shell by disabling the sftp
subsystem in the sshd server, at which point those requests should route
through rssh again.  But I've not tried it.

-- 
Russ Allbery (ea...@ey...)              <http://www.eyrie.org/~eagle/>