Bug 440043 - request to add chroot sftp capabilty into openssh-server
Summary: request to add chroot sftp capabilty into openssh-server
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: openssh
Version: 4.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Tomas Mraz
QA Contact: Brian Brock
URL:
Whiteboard:
Depends On:
Blocks: 440240
TreeView+ depends on / blocked
 
Reported: 2008-04-01 14:40 UTC by Marcelo Giles
Modified: 2018-10-19 20:20 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-10-17 08:26:09 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Marcelo Giles 2008-04-01 14:40:36 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b4pre) Gecko/2008030315 Red Hat/3.0b4pre-0.beta3.4.el5 Minefield/3.0b4pre

Description of problem:
Customer is requesting, for security reasons, that we add chroot capability to our sshd server, more specifically for sftp.

Upstream OpenSSH software version 4.9 recently incorporated this feature.

See release notes and man pages:

http://openssh.org/txt/release-4.9
http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config 

Can we backport this feature into our current version of the openssh-server package for RHEL?

Version-Release number of selected component (if applicable):


How reproducible:
Always


Steps to Reproduce:
1. Use of current OpenSSH RHEL software

Actual Results:
No chroot environment built in configuration options.

Expected Results:
An openssh-server capable of built in chroot configuration options.

Additional info:

Comment 1 Tomas Mraz 2008-04-02 11:42:04 UTC
Given the state of maintenance of RHEL-4 I am not sure this is appropriate
feature for backport. It would also have to be backported to RHEL-5 first so we
wouldn't regress feature-wise.


Comment 3 Christopher J. Buckley 2009-04-09 12:50:06 UTC
(In reply to comment #1)
> Given the state of maintenance of RHEL-4 I am not sure this is appropriate
> feature for backport. It would also have to be backported to RHEL-5 first so we
> wouldn't regress feature-wise.

Would you consider backporting it to RHEL5, Thomas?

Thanks,
Chris

Comment 4 Tomas Mraz 2009-04-09 13:34:19 UTC
Yes, it will be part of 5.4 if QA goes well. See bug 440420


Note You need to log in before you can comment on or make changes to this bug.