[scponly] scponly 4.2 :: chroot dir writable by group/other

JG jg at cms.ac
Tue Dec 27 07:41:48 EST 2005


hi,

i've read about the changes in the new version and set the
permissions/owners accordingly, but scponly still complains with
"chroot dir writable by group/other". 

at the moment the permissions look like:
ls -la /home/ | grep user
dr-xr-xr-x   7 root       root       4096 Apr 19  2005 user
--------------------
ls -la /home/user/
-rw-r--r--   1 root    root     232 Apr 15  2005 .bash_profile
-rw-r--r--   1 root    root     812 Apr 15  2005 .bashrc
drwxr-xr-x   2 root    root    4096 Apr 15  2005 bin
drwxr-xr-x   2 root    root    4096 May 31  2005 etc
drwxr-xr-x   7 user    scponly 4096 Dec 27 13:22 incoming
drwxr-xr-x   2 root    root    4096 Apr 15  2005 lib
drwxr-xr-x   4 root    root    4096 Apr 15  2005 usr

i explicitly did a chmod g-w,o-w -R on the user directory, but it
doesn't help.

scponly[30457]: retrieved home directory of "/home/user//incoming"
for user "user"
scponly[30457]: chroot dir writable by group/other: /home/user


passwd entry:
user:x:1008:893::/home/user//incoming:/usr/sbin/scponlyc

scponly has been compiled with defaults from gentoo portage:
        --enable-scp-compat \
        --enable-rsync-compat \
        --enable-chrooted-binary \

tested clients were standard scp command and winscp 3.80 with SFTP(+scp
fallback).

what am i missing here? thanks for any hints,
JG



More information about the scponly mailing list