Différences

Ci-dessous, les différences entre deux révisions de la page.

--- tech:monter_un_serveur_sftp_chroote_avec_openssh [2025/09/18 15:14] – Jean-Baptiste
+++ tech:monter_un_serveur_sftp_chroote_avec_openssh [2025/09/25 15:03] (Version actuelle) – Jean-Baptiste
@@ Ligne 13: / Ligne 13: @@
 chown root:nsc /chroot
 chmod 750 /chroot
 useradd sftpuser -M -d /dev/null -s /sbin/nologin
+# useradd is a low level utility for adding users. On Debian, administrators should usually use adduser(8) instead.
 echo "/mnt/shared/ /chroot/shared/    none _netdev,bind 0 0" >> /etc/fstab
 </code>
@@ Ligne 38: / Ligne 41: @@
 systemctl status sshd
 </code>
+== Autres
+The simplest way is to create some script that would take care of that. Add
+<code ->
+Match User test1
+  ForceCommand /path/to/your/script.sh
+</code>
+And your script will basically run whatever the user wants, unless it is request for SFTP:
+<code bash>
+#!/bin/bash
+if [[ "$SSH_ORIGINAL_COMMAND" =~ .*sftp-server.* ]]; then
+   echo "SFTP not allowed"
+   exit 255;
+else
+   exec "$SSH_ORIGINAL_COMMAND"
+fi
+</code>
 FIXME