RhostsRSAAuthentication no
ServerKeyBits 768
StrictModes yes
-Subsystem sftp /usr/lib/openssh/sftp-server
SyslogFacility AUTH
TCPKeepAlive yes
UsePAM yes
UsePrivilegeSeparation yes
X11DisplayOffset 10
X11Forwarding no
+
+Subsystem sftp internal-sftp
+Match Group sftp
+ AllowTCPForwarding no
+ ChrootDirectory %h
+ ForceCommand internal-sftp
+ X11Forwarding no