The OpenSSH daemon commonly has its own security feature called privilege separation and hence it is not designed to work with chroot. This patch runs the OpenSSH daemon itself chrooted to the jail. T... More

The OpenSSH daemon commonly has its own security feature called privilege separation and hence it is not designed to work with chroot. This patch runs the OpenSSH daemon itself chrooted to the jail. The chroot is called only after the keys are loaded, so you can store your private keys and sshd_config outside the chroot jail. Once the keys are loaded, sshd runs chrooted.  [edit]  Less