Admins

Modification temporairement appliquée:

diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config
index c2f0ad0..2759b1d 100644
--- a/etc/ssh/sshd_config
+++ b/etc/ssh/sshd_config
@@ -65,7 +65,8 @@ TCPKeepAlive yes
 # Allow client to pass locale environment variables
 AcceptEnv LANG LC_* GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL

-Subsystem sftp /usr/lib/openssh/sftp-server
+#Subsystem sftp /usr/lib/openssh/sftp-server
+Subsystem sftp internal-sftp

 # Set this to 'yes' to enable PAM authentication, account processing,
 # and session processing. If this is enabled, PAM authentication will
@@ -83,3 +84,11 @@ UseDNS no
 #KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
 #MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160

+Match user www-data
+       ChrootDirectory /var/www/questionnaires.april.org
+       AuthorizedKeysFile /var/www/questionnaires.april.org/.ssh/authorized_keys
+        X11Forwarding no
+        AllowTcpForwarding no
+        PermitTunnel no
+       AllowAgentForwarding no
+       ForceCommand internal-sftp

Vu lors de la réunion du 2022-11-30 : Denis est intervenu, les accès peuvent être supprimés.

Accès supprimé.