How to Setup Chroot SFTP in Linux

How to Setup Chroot SFTP in Linux

How to Setup Chroot SFTP in Linux, it's allow only SFTP, not SSH. I'm running commands as root account.
Step 1: To create group
groupadd sftpusers
Step 2: To create user
useradd -g sftpusers -d /home/huupv -s /sbin/nologin huupv
passwd huupv
Step 3: Setup sftp-server Subsystem in sshd_config 
vim /etc/ssh/sshd_config
The output as bellow
#Subsystem       sftp    /usr/libexec/openssh/sftp-server
Subsystem       sftp    internal-sftp
Step 4: Specify Chroot Directory for a Group
vim /etc/ssh/sshd_config
Adding line as following
Match Group sftpusers
        ChrootDirectory /sftp/%u
        ForceCommand internal-sftp
Step 5: To create sftp Home Directory
mkdir -p /sftp/huupv/home/huupv
Step 6: To setup Appropriate Permission
chown huupv:sftpusers /sftp/huupv/home/huupv
service sshd restart
Test chroot sftp
To connect from client ssh to server.
ssh [email protected]
The output as bellow
[email protected]'s password:
This service allows sftp connections only.
Connection to closed.
To connect from client sftp to server.
sftp [email protected]
The output as bellow
[email protected]'s password:
Connected to
sftp> pwd
Remote working directory: /home/huupv
sftp> ls
sftp> ls /
sftp> ls /root
Can't ls: "/root" not found


Popular posts from this blog

zimbra some services are not running [Solve problem]

Bash script list all IP addresses connected to Server

How to install php7 on centos 6