Need to document SSH auto-chroot user ability

[ThePrez]

There is a way to have a non-*ALLOBJ user automatically placed in a chroot if they connect via SSH.

as mentioned here: https://www.mcpressonline.com/programming-other/general/techtip-ifs-containers-part-2-automation-with-ibm-i-chroot

This should be documented properly in this repo. We may want a decision on #51 first, since that would change the way we document it

[kadler]

We should really actually document the proper way to do this using OpenSSH's built-in chroot functionality instead of the major hack added to our OpenSSH: https://www.techrepublic.com/blog/linux-and-open-source/chroot-users-with-openssh-an-easier-way-to-confine-users-to-their-home-directories/

[kjellbe]

Yes, documentation is good/needed.
I suppose this
https://www-01.ibm.com/support/docview.wss?uid=nas8N1018589
isn't uptodate?

[kadler]

It's up to date with the custom chroot hack that was added only to the 5733-SC1 version of OpenSSH, but it's a bit confusing because there's a bunch of stuff that was only needed at 5.4 that could be dropped and all the different paths for the different releases could be simplified to one path, since only 7.2 is in support now.

[kjellbe]

@kadler Thanks for the quick feedback!
Documentation says it's version independent, so for those poor soles not at 7.2 yet, it could be of value to keep old 5.4 stuff there.
I'd prefer using the "normal" way to chroot, ie. using your link from 28 Mar above. But I've failed to get it to work, which I assume is due to custom hack or my misunderstandings. I guess I need to follow the documentation I mentioned 20 Jun and not use the normal /home/ folders which would have been easier in my setup...