[LINUX] ALLOW SCP ONLY - fourslickz/notes GitHub Wiki

sudo adduser scpuser

sudo usermod -s /usr/sbin/nologin scpuser

sudo nano /etc/ssh/sshd_config

Match User scpuser
    ForceCommand internal-sftp
    PasswordAuthentication yes
    ChrootDirectory /home/scpuser
    PermitTunnel no
    AllowAgentForwarding no
    AllowTcpForwarding no
    X11Forwarding no

sudo systemctl restart ssh