Thursday, November 30, 2017

Re: sftp-server

On Thu, Nov 30, 2017 at 05:36:57PM -0600, Edgar Pettijohn wrote:
> I was looking into how best to secure a sftp-server. The manual
> mentions a -Q option to query protocol features supported. I added the
> following line to sshd_config.
>
> Subsystem sftp /usr/libexec/sftp-server sftp -Q requests
>
> So far I'm not sure how to get at the information provided by this
> command line option. Or am I doing it wrong?
>
> Any insight is greatly appreciated.
>
> Edgar

IMO you got confused, it is "query", it does not set anything.

Output of "-Q requests" as "requests"/actions which sftp client
can do on remote server.

An example: you want to mimic anon ftp upload server, then you
would - IIRC - open, write, lstat,... but not readdir, remote,
symlink etc...

j.

No comments:

Post a Comment