Subsystem sftp internal-sftp -u 0002 AuthorizedKeysFile /etc/ssh/authorized_keys/%u %h/.ssh/authorized_keys .ssh/authorized_keys Match Group sftponly ChrootDirectory %h ForceCommand internal-sftp -u 0002 AllowTcpForwarding no X11Forwarding no PasswordAuthentication no