Editing the SSHD_Config File

This config is located at

/etc/ssh/sshd_config

Group Matching for SFTP connections
This adds rules for all users matching the group

Match group sftp
     ChrootDirectory /home
       X11Forwarding no
    AllowTcpForwarding no
       ForceCommand internal-sftp
  AllowUsers user

User Matching for SFTP connections
This adds rules for all users specified

Match user user
        ChrootDirectory /home
        X11Forwarding no
        AllowTcpForwarding no
        #ForceCommand internal-sftp

Prevent root user from being able to connect to an ssh login request

PermitRootLogin no

Allow a user to forward X11

AllowUsers user
     X11Forwarding yes