ChrootDirectory option for SunSSH server [PSARC/2009/155 Self Review]

[James Carlson]

Darren J Moffat writes:
> Maybe but I'd rather it wasn't part of this case.  The common case for 
> SSH chroot is for SFTP and the use of the internal-sftp is the best 
> solution for that.
> 
> chroot environments cause a significant patching/pkg update problem and 
> I'd rather not encourage use of building those environments.

I guess it depends on how strongly users feel about using those
environments.

(I agree about the update problem.  It'd be nice if we had some
cleaner solution for that, like a pick-and-choose lofs.)

> I suspect the script for ftpd would be sufficiently close to work for 
> SSH anyway.

OK.

+1

-- 
James Carlson, Solaris Networking              <james.d.carlson at sun.com>
Sun Microsystems / 35 Network Drive        71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677