SFTP Server serving root directory if specified dir not accessable

Hey,

I'm using the https://github.com/OpenMediaVa…opers/openmediavault-sftp Plugin for my server.

I have made the observation that when my LUKS encrypted Hard Drive isn't unlocked and I try to access a shared folder on the hard drive, instead of serving an error or something my SFTP Client will show the root directory of my OMV Installation and lets me access all the files inside. Is this intented behaviour?

Zitat von ryecoaaron

Yep. sftp bind mounts the path. Bind mounts don't care if the path is mounted or not.

Thanks. Is there a way to restrict access to folders that are not meant to be seen by the sftp user?

So I have figured out that allowing access only to members of the sftp group should jail them inside their directory. Now I have got the problem that even though the luks device is decryptet sftp still serves the root directory, just without access to the folders inside it. I have no way to access the desired folder.

Zitat von ryecoaaron

The bind mounts will need to be remounted after the LUKS device is decrypted. Using LUKS has many issue with OMV because OMV expects drives to be accessible always. Unlocking on boot is my only suggestion.

Thanks for the info but I figured out what my problem was. The reason was the "share root filesystem" plugin by omv-extras. Since I removed this one the sftp server refuses connections when the encrypted device is not mounted and only accepts requests once its unlocked. Since I don't use "share root fs" atm it is not relevant to me, but is there a possibility for a fix in the future?