flipdot/basics-formula
23
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

use internal sftp-server

Browse source 
internal sftp-server is needed according to https://serverfault.com/questions/354615/allow-sftp-but-disallow-ssh
as we want add a user who is only able to upload files in a chroot
environment
This commit is contained in:
Malte 2024-11-10 19:09:03 +01:00
parent f5d1213812
commit a87f5083e8
1 changed files with 1 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
basics/ssh/sshd_config.jinja
View file

@ -12,8 +12,4 @@ X11Forwarding {{ salt['pillar.get']('basics:ssh:x11_forwarding', 'no') }}
PrintMotd no PrintMotd no
MaxStartups 5:50:30 MaxStartups 5:50:30
AcceptEnv LANG LC_* AcceptEnv LANG LC_*
{% if grains.os_family == "Suse" %} Subsystem sftp internal-sftp
Subsystem sftp /usr/libexec/ssh/sftp-server
{% else %}
Subsystem sftp /usr/lib/openssh/sftp-server
{% endif %}