I am attempting to give chroot sftp access to a group, as well as giving limited tunneling capability. I can give one or the other, but haven't figured out how to do both at the same time. The relevant part of sshd_config looks like this:
Match Group sshchroot ChrootDirectory %h ForceCommand internal-sftp X11Forwarding no PermitTunnel no GatewayPorts no AllowAgentForwarding no PermitOpen somedomain.com:12345
Any ideas or suggestions? Thanks!