Bruger må kun opholde sig i sin egen mappe

du kan forhindre at brugeren overhovedet skifter mappe med:
bash -r
;)

sakset fra man bash:
RESTRICTED SHELL
      If  bash  is started with the name rbash, or the -r option
      is supplied at invocation, the shell  becomes  restricted.
      A  restricted  shell is used to set up an environment more
      controlled than the standard shell.  It  behaves  identi­
      cally  to  bash  with the exception that the following are
      disallowed or not performed:

      ·      changing directories with cd

      ·      setting or unsetting the  values  of  SHELL,  PATH,
              ENV, or BASH_ENV

      ·      specifying command names containing /

      ·      specifying  a  file name containing a / as an argu­
              ment to the .  builtin command

      ·      Specifying a filename  containing  a  slash  as  an
              argument  to the -p option to the hash builtin com­
              mand

      ·      importing function definitions from the shell envi­
              ronment at startup

      ·      parsing the value of SHELLOPTS from the shell envi­
              ronment at startup

      ·      redirecting output using the >, >|, <>, >&, &>, and
              >> redirection operators
      ·      using the exec builtin command to replace the shell
              with another command

      ·      adding or deleting builtin commands with the -f and
              -d options to the enable builtin command

      ·      specifying  the  -p  option  to the command builtin
              command

      ·      turning off restricted mode with set +r or  set  +o
              restricted.

      These  restrictions  are  enforced after any startup files
      are read.

Tak, men det ser ud til at brugeren så ikke kan lave mapper i sin egen mappe. Og det skal denne kunne, samt kunne komme ned i dem.

fandt en artikel på linuxdoc om hvordan man sætter bind op vha. chroot :
http://tldp.org/HOWTO/Chroot-BIND8-HOWTO-2.html