Mastering Linux Security and Hardening

Hands-on lab – setting up a chroot directory for sftpusers group

For this lab, you can use either the CentOS virtual machine or the Ubuntu virtual machine. You'll add a group, then configure the sshd_config file to allow group members to only be able to log in via SFTP, and to confine them to their own directories. For the simulated client machine, you can use the terminal of your MacOS or Linux desktop machine, or Cygwin from your Windows machine:

1. Create the sftpusers group:

        sudo groupadd sftpusers

2. Create a user account for Max, and add him to the sftpusers group. On CentOS, do:

        sudo useradd -G sftpusers max

On Ubuntu, do:

        sudo useradd -m -d /home/max -s /bin/bash -G sftpusers max

3. For Ubuntu, ensure that the users' home directories ...