Have a look at http://www.sublimation.org/scponly/. Probably what you want to allow users to securely access their personal web home while not being able to travel through most of your system.
Exactly what I would like to have. 1 question, how does it integrate with SSH? Does it also listen on port 22? Can I still use WINSCP (most users i think will be using windows)
it works so that the users have a special login-shell (scponly or scponlyc if chrooted). All the authentication stuff is made by the existing ssh. And yes, it works well with WinSCP.
-volker
