Hi Peeps,

PLEASE HELP ME!! I have a CentOS-based VPS that has a few small sites on, I can give users chroot-ed vsftp access, to thier home directory (where the site content is). This all well and good, but I think its a bit weak from a security perspective, as all people here would know FTP is an old and insecure protocol, so I would like to setup chrooted sftp access. CentOS 5.3 only comes with openSSH 4.3, wich doesnt support chrooted-sftp. There are various semi-guides areound the place as to how to install a later version of SSH but they seem to be very messy, and i wondered if anyone know of a guide, or could make one, that is simple to follow andactualy works. I will be very greatfull if someone could at least look into this for me.

I would greatly appreiate it if someone could help me with this. Thanks.

I don't know of an elegant solution to this problem with your OpenSSH version. There are possibilities - e.g. compiling an suid-bit scponly shell - but IMO they're worse than the problem you're trying to solve.

I'm looking around for a fix, and by the looks of it they are really not very elegant. I wish that repos where more flexible. I'll post the solution when/if I find one.

Thanks.