Re: ChrootDirectory on a per key basis
Damien Miller wrote:[color=blue][color=green][color=darkred]
> > > or even better, could a 'chrootdir' option be added to the
> > > Authorized keys format?[/color]
> > Yes. I think this will be the easiest to implement. Give it a shot.
> > Infrastructure is in place also for passing a value from options in
> > authorized_keys.[/color]
> No, letting users chroot to arbitrary directories introduces
> serious security problems.[/color]
Thanks - this is an important point!
I was thinking about (and hope the OP did too) a case where
authorized_keys is not user writable, but always controlled by
openssh-unix-dev mailing list