[gentoo-server] users of virtual domains

[Ben Munat]

So I'm slowly getting my gentoo server in shape... and adding my first 
virtual host client (heh, my cousin's DJ business website). I've set up 
a vhost mapping in apache for her doc root and I've added her domain to 
vpopmail. All is going well...

Except, it has occured to me that I would like to give her ssh/sftp 
access (I don't want to be making changes for her every other day). I've 
set up a user on the machine, but it makes me a little nervous. Not that 
I'm worried about my cousin, but she's been known to give her password 
to techie friends so that they can "help".

So, my question is, is there a way to restrict her user's movements in 
the file system? It would be nice if she were only able to work within 
her home directory.

When I log into my account with my old hosting company, I can cd up to 
"/", but it's obviously not the machine's "/"... there's only about ten 
commands under /bin and only our users under /home. Is this a UML setup? 
Is there some other way to restrict movement?

Or maybe I should start making all sensitive files chown root and chmod 700?

Any all thoughts much appreciated...

Ben