Chroot SFTP for standard users

Contribute Room Core dev
1

Hi team:
One useful feature would be to enable chroot+sftp force for yunohost users ; this could enable them to connect without the risk of overpass their use cases.
In my server, I as full admin should be the only one to have a shell access, for SoD purposes.

For example:
When creating multi custom web app that could be managed by yunohost user, bind webapp to chrootes user’s home for, that enables him to see his webapp only.

When using NextCloud: one could upload/download files through SFTP that would be integrated in the app by a cron job

Etc.
What are your thoughts about this?

2

Hi !

You can already give a chrooted sftp access to your users with the command sudo yunohost user ssh.

You can list the options with :

sudo yunohost user ssh --help
3

Hm I doubt that it is chrooted though :thinking:

4

Oops, you’re right. It’s the my_webapp app that set up chrooted sftp access (when the user is part of the sftpusers group).