CHroot sftp-only SSH users into their homes

To chroot an SFTP directory, you must :

To chroot an SFTP directory, you must

Create an user and force root to be owner of it

cd /home

mkdir john

useradd -d /home/john -M -N -g users john

sudo chown root:root /home/john

sudo chmod 755 /home/john

Change the subsystem location on /etc/ssh/sshd_config:

#Subsystem sftp /usr/lib/openssh/sftp-server

Subsystem sftp internal-sftp

and create a user section at the end of the file (ssh can die respawning if placed after Subsystem line):

Match User john

ChrootDirectory /home/john

ForceCommand internal-sftp

AllowTCPForwarding no

X11Forwarding no