I have multiple folders in /var/www for different websites -- Apache uses name-based Virtual Hosts (Ubuntu Server). Suppose I want to allow someone to access their /var/www/user directory, but not cd out of it and be able to traverse the system.
I found information about an OpenSSH Jail here: http://antitese.org/sshjail/
Has anyone used/implemented something like this? Is there a better way aside from basic permissions to control this?