Re: SFTP Question - Restrict access to home directory on user profile

Hello Don,

Am 10.06.2021 um 05:01 schrieb Don Brown via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>:

All the SFTP set up stuff I have read does not address this.
[…]
How do I lock that user to the one directory only ?

Think outside the IBM i box. As Larry pointed out, search for sftp chroot. The configuration is the same for IBM i and, say, Linux. It involves changing /etc/ssh/sshd_config and further setup. As far as I remember, the home directory itself is required to be readonly for the given user, and only subdirectories thereof are allowed to be writeable.

If you still need more instructions, feel free to ask. Not too much free time at the moment here.

The /home/user directory has
*PUBLIC *RX
USER *RWX

The /home directory has
*PUBLIC *RWX
QSYS *RWX

You can't do it with setting access rights only.

:wq! PoC