Openssh server 設定特定群組限用 sftp

編輯 /etc/ssh/sshd_config 

# override default of no subsystems
#Subsystem      sftp    /usr/lib/openssh/sftp-server
Subsystem sftp internal-sftp

 Match group domain?users
#Match group *,!sudo
    #ChrootDirectory /home/%u@loc
    ChrootDirectory /home
    X11Forwarding no
    AllowTcpForwarding no
    ForceCommand internal-sftp