Limiting SSH User to a Directory

I need consultants to be able to have full access to cirtain parts of my Red Hat Enterprise Linux server, but no ability to navigate/read/write/execute outside those areas. I am requesting a paper explaining how to set this up. This solution must allow me to easily set up directories on my server so that a consultant can log in and work on the files (including commands such as grep, ls, vi, rm). They must otherwise be unable to view anything else on the server. They must not be able to navigate outside the defined folders and must not be able to read/copy anything else on the server, including doing so through FTP transfer. ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables): a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform Red Hat Enterprise Linux 4 ES