I use SSH keys to allow passwordless logons to my box. I want to limit them to SFTP only.
I have the following in my
authorized_keys file which appears to work:
command="internal-sftp" ssh-rsa ...
I can't seem to find a way around it...but I am no genius...am I actually secure?