# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2 # but this is overridden so installations will only check .ssh/authorized_keys AuthorizedKeysFile .ssh/authorized_keys # Only allow sftp users AllowUsers nochainstounlock ChrootDirectory /chroot # override default of no subsystems Subsystem sftp /usr/libexec/sftp-server # Example of overriding settings on a per-user basis Match User nochainstounlock X11Forwarding no AllowTcpForwarding no PermitTTY no ForceCommand internal-sftp