mkdir -v -p /sftp/root/${USER}/home
chown root.root /sftp/root/${USER}
mount –bind /
useradd -g tomcat -s /sbin/nologin ${USER}
sshd_config
…
Match Group tomcat
AllowTcpForwarding no
ForceCommand internal-sftp -u 0002 -d home