New Content #15200
closed
usermanager privileges have ZERO documentation on the "User - System: Copy files to home directory (chrooted scp)" privileges setting/setup
0%
Description
The manual section which should have this documented, is glaringly empty:
https://docs.netgate.com/pfsense/en/latest/usermanager/privileges.html#usermanager-privileges
So it's not clear how one can set up such a user that has a functioning scp/sftp only account.
While this would be useful for various convenience operations, like e.g. automatic config backups, it would also allow certificate creation/renewal to be reasonably safely use FTP Webroot for the challenge mechanism.
Without documentation: no go!
Updated by Jim Pingle 3 months ago
- Status changed from New to Rejected
- Priority changed from High to Normal
That's a deliberate choice. The firewall is not meant to be a general-purpose file server with access handed out freely. Anyone who wants to take that step needs to have a deeper understanding of how it works and the implications, so it's left for users to figure out on their own.