Skip to main content
Correction
Source Link
Chris Davies
  • 128.3k
  • 16
  • 179
  • 324

Although SFTP is not part of the extensible core SSH protocol, it is built-in to at least one of the the common SSH protocolimplementations (OpenSSH) and therefore the SSH servercan be considered to be a standard component.

You can disable the functionality on the server if it's not required by changing /etc/ssh/sshd_config so that you remove the Subsystem line corresponding to the sftp-server.

For example, this line defines an external sftp-server utility to handle the SFTP service:

Subsystem sftp-server 

This line defines an internal implementation of the SFTP service:

Subsystem internal-sftp 

Removing or commenting out the Subsystem line will disable the SFTP service entirely.

# Subsystem … 

Remember that tools such as rsync (if it's installed) and versions of scp will still function, though, so disabling SFTP will not of itself prevent users from transferring files between client and server. (Older versions of scp will work independently of SFTP. Newer versions use SFTP but can be forced to use the older protocol with the -O flag.) There are also "trivial" solutions such as ssh remoteHost cat somefile > local_copy_of_somefile to consider.

SFTP is built-in to the SSH protocol and therefore the SSH server.

You can disable the functionality on the server if it's not required by changing /etc/ssh/sshd_config so that you remove the Subsystem line corresponding to the sftp-server.

For example, this line defines an external sftp-server utility to handle the SFTP service:

Subsystem sftp-server 

This line defines an internal implementation of the SFTP service:

Subsystem internal-sftp 

Removing or commenting out the Subsystem line will disable the SFTP service entirely.

# Subsystem … 

Remember that tools such as rsync (if it's installed) and versions of scp will still function, though, so disabling SFTP will not of itself prevent users from transferring files between client and server. (Older versions of scp will work independently of SFTP. Newer versions use SFTP but can be forced to use the older protocol with the -O flag.) There are also "trivial" solutions such as ssh remoteHost cat somefile > local_copy_of_somefile to consider.

Although SFTP is not part of the extensible core SSH protocol, it is built-in to at least one of the the common SSH implementations (OpenSSH) and therefore can be considered to be a standard component.

You can disable the functionality on the server if it's not required by changing /etc/ssh/sshd_config so that you remove the Subsystem line corresponding to the sftp-server.

For example, this line defines an external sftp-server utility to handle the SFTP service:

Subsystem sftp-server 

This line defines an internal implementation of the SFTP service:

Subsystem internal-sftp 

Removing or commenting out the Subsystem line will disable the SFTP service entirely.

# Subsystem … 

Remember that tools such as rsync (if it's installed) and versions of scp will still function, though, so disabling SFTP will not of itself prevent users from transferring files between client and server. (Older versions of scp will work independently of SFTP. Newer versions use SFTP but can be forced to use the older protocol with the -O flag.) There are also "trivial" solutions such as ssh remoteHost cat somefile > local_copy_of_somefile to consider.

Modified information relating to newer versions of scp
Source Link
Chris Davies
  • 128.3k
  • 16
  • 179
  • 324

SFTP is built-in to the SSH protocol and therefore the SSH server.

You can disable the functionality on the server if it's not required by changing /etc/ssh/sshd_config so that you remove the Subsystem line corresponding to the sftp-server.

For example, this line defines an external sftp-server utility to handle the SFTP service:

Subsystem sftp-server 

This line defines an internal implementation of the SFTP service:

Subsystem internal-sftp 

Removing or commenting out the Subsystem line will disable the SFTP service entirely.

# Subsystem … 

Remember that tools such as scp and rsync (if it's installed) and versions of scp will still function, though, so disabling SFTP will not of itself prevent users from transferring files between client and server. (Older versions of scp will work independently of SFTP. Newer versions use SFTP but can be forced to use the older protocol with the -O flag.) There are also "trivial" solutions such as ssh remoteHost cat somefile > local_copy_of_somefile to consider.

SFTP is built-in to the SSH protocol and therefore the SSH server.

You can disable the functionality on the server if it's not required by changing /etc/ssh/sshd_config so that you remove the Subsystem line corresponding to the sftp-server.

For example, this line defines an external sftp-server utility to handle the SFTP service:

Subsystem sftp-server 

This line defines an internal implementation of the SFTP service:

Subsystem internal-sftp 

Removing or commenting out the Subsystem line will disable the SFTP service entirely.

# Subsystem … 

Remember that tools such as scp and rsync (if it's installed) will still function, though, so disabling SFTP will not of itself prevent users from transferring files between client and server.

SFTP is built-in to the SSH protocol and therefore the SSH server.

You can disable the functionality on the server if it's not required by changing /etc/ssh/sshd_config so that you remove the Subsystem line corresponding to the sftp-server.

For example, this line defines an external sftp-server utility to handle the SFTP service:

Subsystem sftp-server 

This line defines an internal implementation of the SFTP service:

Subsystem internal-sftp 

Removing or commenting out the Subsystem line will disable the SFTP service entirely.

# Subsystem … 

Remember that tools such as rsync (if it's installed) and versions of scp will still function, though, so disabling SFTP will not of itself prevent users from transferring files between client and server. (Older versions of scp will work independently of SFTP. Newer versions use SFTP but can be forced to use the older protocol with the -O flag.) There are also "trivial" solutions such as ssh remoteHost cat somefile > local_copy_of_somefile to consider.

Explain how to disable the service if it's not required
Source Link
Chris Davies
  • 128.3k
  • 16
  • 179
  • 324

SFTP is built-in to the SSH protocol and therefore the SSH server.

You can disable the functionality on the server if neededit's not required by changing /etc/ssh/sshd_config so that you remove the Subsystem line corresponding to the sftp-server.

For example, this line defines an external sftp-server utility to handle the SFTP service:

Subsystem sftp-server 

This line defines an internal implementation of the SFTP service:

Subsystem internal-sftp 

Removing or commenting out the Subsystem line will disable the SFTP service entirely.

# Subsystem … 

Remember that tools such as scp and rsync (if it's installed) will still function, though, so disabling SFTP will not of itself prevent users from transferring files between client and server.

SFTP is built-in to the SSH protocol and therefore the SSH server.

You can disable the functionality if needed.

SFTP is built-in to the SSH protocol and therefore the SSH server.

You can disable the functionality on the server if it's not required by changing /etc/ssh/sshd_config so that you remove the Subsystem line corresponding to the sftp-server.

For example, this line defines an external sftp-server utility to handle the SFTP service:

Subsystem sftp-server 

This line defines an internal implementation of the SFTP service:

Subsystem internal-sftp 

Removing or commenting out the Subsystem line will disable the SFTP service entirely.

# Subsystem … 

Remember that tools such as scp and rsync (if it's installed) will still function, though, so disabling SFTP will not of itself prevent users from transferring files between client and server.

Source Link
Chris Davies
  • 128.3k
  • 16
  • 179
  • 324
Loading