SoylentNews

canopic jug [soylentnews.org] writes:

The SFTP component in OpenSSH provides a chroot-feature for hardening. It is stated in the documentation that the chroot directory must not be writable by the user account, though specific files and subdirectories within it are allowed. Some people were questioning the read-only restriction. halfdog documents some analysis [halfdog.net] which is the result of discussions on openssh-dev mailing list. Here are some arguments about why these restrictinons still makes sense in 2018.

Original Submission