From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 107255 invoked by alias); 28 Nov 2017 00:05:15 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 107246 invoked by uid 89); 28 Nov 2017 00:05:14 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=2.2 required=5.0 tests=BAYES_50,FREEMAIL_FROM,KAM_THEBAT,KB_WAM_FROM_NAME_SINGLEWORD,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2 spammy=HX-Priority:Normal, H*M:yandex, H*R:D*cygwin.com, H*F:D*yandex.ru X-HELO: forward106j.mail.yandex.net Received: from forward106j.mail.yandex.net (HELO forward106j.mail.yandex.net) (5.45.198.249) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Tue, 28 Nov 2017 00:05:12 +0000 Received: from mxback12g.mail.yandex.net (mxback12g.mail.yandex.net [IPv6:2a02:6b8:0:1472:2741:0:8b7:91]) by forward106j.mail.yandex.net (Yandex) with ESMTP id 41A081800E1A; Tue, 28 Nov 2017 03:05:03 +0300 (MSK) Received: from smtp2o.mail.yandex.net (smtp2o.mail.yandex.net [2a02:6b8:0:1a2d::26]) by mxback12g.mail.yandex.net (nwsmtp/Yandex) with ESMTP id usiippCepf-534uhhqj; Tue, 28 Nov 2017 03:05:03 +0300 Received: by smtp2o.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id 2oXGlX9aCu-52u8cxNA; Tue, 28 Nov 2017 03:05:02 +0300 (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (Client certificate not present) Authentication-Results: smtp2o.mail.yandex.net; dkim=pass header.i=@yandex.ru Received: from [192.168.1.10] (HELO daemon2.darkdragon.lan) by daemon2 (Office Mail Server 0.8.12 build 08053101) with SMTP; Mon, 27 Nov 2017 23:59:48 -0000 Date: Tue, 28 Nov 2017 00:05:00 -0000 From: Andrey Repin Reply-To: cygwin@cygwin.com Message-ID: <84854143.20171128025948@yandex.ru> To: snorthrop@moog.com, cygwin@cygwin.com Subject: Re: Issues hiding /dev virtual directory from SFTP users In-Reply-To: <2512145081DA00479295CF769D4C8F350128B3517D@BNVMMSX0A61086A.polysci.com> References: <2512145081DA00479295CF769D4C8F350128B3517D@BNVMMSX0A61086A.polysci.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-IsSubscribed: yes X-SW-Source: 2017-11/txt/msg00266.txt.bz2 Greetings, snorthrop@moog.com! > Hello, > I am trying to get sftp secured using OpenSSH. I have been able to jail > the users to their home directory and remove the cygdrive virtual directory > from showing but I have been unable to get the /dev virtual directory > removed from the users when they SFTP. In the past I have been able to just > add "/dev /null none bind" to the fstab file but that no longer works. > Can anyone suggest how I may be able to accomplish this with CYGWIN_NT-6.3 and openssh 7.6p 1-1 ? If you jail the user to their home directory, they shouldn't be able to see the Cygwin root in first place. I don't understand your issue. -- With best regards, Andrey Repin Tuesday, November 28, 2017 02:58:54 Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple