chroot is what you need, but plain old chroot might be daunting to a beginner. I think there are nice packages like jailkit
which make the job easier for the administrator. This sort of mechanism is often used for remote ssh access, cvs access, and webserver access to untrusted users.
I think you meant “their”