I'd like to give one of my friend access to my server through ssh so he can setup a tunnel and use as a SOCKS proxy (to circumvent pesky per country restrictions on certain website, we're in France)
However, I do not want him accessing my files on the server. In fact I don't want him to be able to do anything but create ssh tunnels.