# Subsystem sftp /usr/lib/openssh/sftp-server Subsystem sftp internal-sftp Match User sftpuser ChrootDirectory /chroot ForceCommand internal-sftp AllowTcpForwarding no GatewayPorts no X11Forwarding no PermitTunnel no AllowAgentForwarding no PermitTTY no