18 lines
		
	
	
		
			523 B
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
		
		
			
		
	
	
			18 lines
		
	
	
		
			523 B
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
| 
								 | 
							
								# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
							 | 
						||
| 
								 | 
							
								# but this is overridden so installations will only check .ssh/authorized_keys
							 | 
						||
| 
								 | 
							
								AuthorizedKeysFile	.ssh/authorized_keys
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Only allow sftp users
							 | 
						||
| 
								 | 
							
								AllowUsers nochainstounlock
							 | 
						||
| 
								 | 
							
								ChrootDirectory /chroot
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# override default of no subsystems
							 | 
						||
| 
								 | 
							
								Subsystem	sftp	/usr/libexec/sftp-server
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Example of overriding settings on a per-user basis
							 | 
						||
| 
								 | 
							
								Match User nochainstounlock
							 | 
						||
| 
								 | 
							
									X11Forwarding no
							 | 
						||
| 
								 | 
							
									AllowTcpForwarding no
							 | 
						||
| 
								 | 
							
									PermitTTY no
							 | 
						||
| 
								 | 
							
								        ForceCommand internal-sftp
							 |