I'm planning to offer a backup service with limited ssh access.
The best solution i've thought of so far would be to use chroot and allow access only to certain commands like: cd,mkdir,mv,rm,rsync,sftp etc, and mount the home directories as noexec.
I'm planning to do this on a centos 7 system.
Is there any way that a malicious customer could break out of the chroot system and invade other user's data or create other issues? Any other security considerations?