IBM Support

How to restrict sftp user to read-only access

How To


Summary

An sftp user or group can be restricted to read-only access by using the "internal-sftp -R" option.
After a successful configuration, the sftp user or group will only have read-only access.

Steps

Here is an example of an entry in sshd_config file to restrict "user1" to read-only access for sftp:
Match User user1
  ForceCommand internal-sftp -R
Here is an example of an entry in sshd_config file to restrict "testgrp" to read-only access for sftp:
Match Group testgrp
  ForceCommand internal-sftp -R

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB08","label":"Cognitive Systems"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG10","label":"AIX"},"ARM Category":[{"code":"a8m0z000000cvzvAAA","label":"AIX Open Source-\u003EOPENSSH\/OPENSSL"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"}],"Version":"All Versions"}]

Document Information

Modified date:
14 June 2023

UID

ibm17003865