The Background:
I have a Win2k3 SP2 machine and have OpenSSH installed and configured to what I have read/researched online. The main purpose of this server is to run SFTP to help secure our file transfers with users and other clients. Using software like FileZilla, I am successful in connecting and authenticating to the server, and do file uploads/downloads. Currently it is using host based authentication.
The Problem:
Currently users that are listed in the “..\etc\passwd” file are the only ones that can connect and their default home directory which is fine. Set in the passwd file, is “/home/USERNAME” which is on a different drive connected to the same server. The “/home” is also defined in the registry to go to that location. However, in the registry the default for “/” goes straight to the program files home directory, and any user that navigates up the folder hierarchy can get to the OpenSSH program files. Modifying the registry entry for the native key “/” breaks the program. Also, by navigating up, they can also see and go into other users “/home/USERNAME” folders.
The Question:
How can I prevent users from navigating up beyond their home directory? How can I also hide folders from other users. Is this a Windows DACL problem or can this be done in SSH?
JP Babiera
LAC Network Administrator