X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:references
	:in-reply-to:content-type:content-transfer-encoding
	:mime-version; q=dns; s=default; b=PgZ/z2UWFpMVbI4b0Vah6EzbpLH/P
	zNykQ/O33Afa/MiLlZs9E30Puvi1FqKZZermmuQT7GIL2jpdTevlTdG6z8zyEKRG
	4U3DVtFwPL1wZ0Zb2ygvhQXg2FgFZynsZCF17tAFwqX8v/l+t0jh9DkKUJlZht6l
	nCkIXCPHb1U+YQ=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:references
	:in-reply-to:content-type:content-transfer-encoding
	:mime-version; s=default; bh=gzI3Kyq1RlFXj6qzRKO7/9QjhLk=; b=Caw
	AKemIgEA+grxPxMScy1tr9FIPnqPl9WSwcUOoARUNgMDjyqN6ol5xmE8VPQAbqgK
	9aL0ODn53NMILXQ46JngNFKxJwuyo/dZaRbUIELwXmN47AKe8fnAql/ypEBuVvDr
	GwuMltBCVNufUpELdDl3eQimkbwINNaIEU2+Jv3c=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.0 required=5.0 tests=BAYES_20,GIT_PATCH_2,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.2 spammy=D*yandex.ru, terrible, Repin, repin
X-HELO:	mx0a-00184801.pphosted.com
From:	<snorthrop AT moog DOT com>
To:	<cygwin AT cygwin DOT com>
Subject:	RE: [EXTERNAL] Re: Issues hiding /dev virtual directory from SFTP users
Date:	Tue, 28 Nov 2017 12:50:27 +0000
Message-ID:	<2512145081DA00479295CF769D4C8F350128B364F1@BNVMMSX0A61086A.polysci.com>
References:	<2512145081DA00479295CF769D4C8F350128B3517D AT BNVMMSX0A61086A DOT polysci DOT com> <84854143 DOT 20171128025948 AT yandex DOT ru>
In-Reply-To:	<84854143.20171128025948@yandex.ru>
x-titus-metadata-40:	eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL01PT0cgKFBvQykiLCJpZCI6Ijg5M2U3NWRlLWRkZDAtNGJhNS1iMDFlLWM3NGQ4Mzg0YTg2NSIsInByb3BzIjpbeyJuIjoidGVjaERhdGEiLCJ2YWxzIjpbeyJ2YWx1ZSI6IlVua25vd24ifV19XX0sIlN1YmplY3RMYWJlbHMiOltdLCJUTUNWZXJzaW9uIjoiMTYuMi4xMS4wIiwiVHJ1c3RlZExhYmVsSGFzaCI6IjdERURkMThNUmIreXErZVRcLzVnT2ZzQnVHWm1tcFdaa1hVb3VsbUdDK3V3PSJ9
x-exclaimer-md-config:	05c4d62c-9bdd-4249-a581-e9f3cb37f4e1
MIME-Version:	1.0
X-Proofpoint-Virus-Version:	vendor=fsecure engine=2.50.10432:,, definitions=2017-11-28_08:,, signatures=0
X-Proofpoint-Spam-Details:	rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=1 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1709140000 definitions=main-1711280174
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id vASCohBL026417

Andrey,

They are not able to see the cygdrive.  They are able to see the /dev virtual directory and all of the device mounts within it.

Regards,

Shad 


-----Original Message-----
From: Andrey Repin [mailto:anrdaemon AT yandex DOT ru] 
Sent: Monday, November 27, 2017 7:00 PM
To: Northrop, Shad <snorthrop AT moog DOT com>; cygwin AT cygwin DOT com
Subject: [EXTERNAL] Re: Issues hiding /dev virtual directory from SFTP users

Greetings, snorthrop AT moog DOT com!

> Hello,

> I am trying to get sftp secured using OpenSSH.  I have been able to jail
> the users to their home directory and remove the cygdrive virtual directory
> from showing but I have been unable to get the /dev virtual directory
> removed from the users when they SFTP.  In the past I have been able to just
> add "/dev /null none bind" to the fstab file but that no longer works.

> Can anyone suggest how I may be able to accomplish this with CYGWIN_NT-6.3 and openssh 7.6p 1-1 ?

If you jail the user to their home directory, they shouldn't be able to see
the Cygwin root in first place.
I don't understand your issue.


-- 
With best regards,
Andrey Repin
Tuesday, November 28, 2017 02:58:54

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -