Allow only SFTP and chroot user
useradd sftp-only create user In /etc/ssh/sshd_config comment the existing line starting with Subsystem sftp and add: Subsystem sftp internal-sftp Match user sftp-only ChrootDirectory /path/to/the/dir X11Forwarding no AllowTcpForwarding no ForceCommand internal-sftp service sshd restart The folder must be owned by root, remember to set the read/write permission for the user. User will be chrooted to the selected folder and won’t be able to use ssh or the shell.