Back door in ProFTPD FTP server (The H)

Posted Dec 3, 2010 9:37 UTC (Fri) by sjlyall (guest, #4151)
In reply to: Back door in ProFTPD FTP server (The H) by bronson
Parent article: Back door in ProFTPD FTP server (The H)

I have a few customers who need to upload files so I was going to use the excuse of moving to new servers recently to push them to sftp.

But it turns out that it doesn't quite work with RHEL/Centos 5 because while Redhat backported the chroot to their version of sshd they didn't backport the "Match" command so you can't chroot just a limited number of users (ie NOT the interactive or admin logins) easily.

There are a few other options (manually created chroot, maintain own ssh packages) but they all seemed a bit too much trouble. I'll review things when I move to RHEL6 I guess.