Damien Miller wrote:
> > > or even better, could a 'chrootdir' option be added to the
> > > Authorized keys format?

> >
> > Yes. I think this will be the easiest to implement. Give it a shot.
> > Infrastructure is in place also for passing a value from options in
> > authorized_keys.

> No, letting users chroot to arbitrary directories introduces
> serious security problems.

Thanks - this is an important point!

I was thinking about (and hope the OP did too) a case where
authorized_keys is not user writable, but always controlled by
the adminstrator.

openssh-unix-dev mailing list