Build script:
./configure --prefix=/usr/local \
 --enable-chrooted-binary \
 --with-sftp-server=/usr/libexec/sftp-server \
 --enable-winscp-compat \
 --enable-scp-compat \
 scponly_PROG_GROUPS=/usr/local/bin/groups
make
make DESTDIR=$1 install
rm -f $1/usr/local/etc/scponly/debuglevel
cp -L /usr/local/bin/groups $1/usr/local/bin/
cp $2/mkscproot $1/usr/local/sbin/
chmod u+s $1/usr/local/sbin/scponlyc
TCEI=$1/usr/local/tce.installed/scponly
mkdir -p $(dirname $TCEI)
cat <<EOF > $TCEI
sed '/scponly/d' -i /etc/shells
echo /usr/local/bin/scponly >> /etc/shells
echo /usr/local/sbin/scponlyc >> /etc/shells
mkdir -p /usr/local/etc/scponly/
echo 0 > /usr/local/etc/scponly/debuglevel
mkdir -p /usr/libexec/
[ -e /usr/libexec/sftp-server ] || [ -e /usr/local/libexec/sftp-server ] && \
cp -L /usr/local/libexec/sftp-server /usr/libexec/ 2>/dev/null
EOF
chmod +x $TCEI