Hello,

I am setting up a user who should have below configuratin.

Home dir = /home/test

Only allowed to view below directory

/var/log/tomcat
/usr/local/opus

He must not able to even real other directory. He should have access to only above directories.

Also he should be able to run all commands and allow to restart only apache and tomcat service. He should not able to restart any other service.

Please help me to set it up.

Sorry, not possible. You can run SSH in a chroot jail, but that limits them to their OWN home directory. You can't have multiple directories specified. The only possibility would be to make symbolic links to those directories, but even then that's not a wise idea, since you'd then have a hard time with permissions for other users (like Apache, tomcat, etc.), being able to access them.
You can set up sudo to let users run certain commands as root. Restarting services is a root-only thing, and restricting a user to one or two commands is fairly simple. There is much documentation on setting up the sudoers file you can find with a Google search.

Hello,

Thanks for quick reply. I was also thinking that its not possible just want to know from experts that if its possible.

Can you provide me a link to easily setup chroot in centos ?

http://www.google.com

Put "how to setup ssh chroot in centos" into the search box, and press ENTER.

You can "mount" other directories benieth jailed home, like:
# mount -o bind /var/log/tomcat /home/user/tomcatlogs

Your best bet would be to look into using SELinux to define a specific role.

But you have to realize that the types already assigned to the directories/files may require you to also grant access to other files and directories.

Second, partly a nit... If the user can only access /var/log/tomcat and /usr/local/opus, how is the user to use ANY commands, or even have a shell? These have to be accessed through /usr/bin... and depending on what the user is doing, may also require access to /tmp, /var (log files reporting other errors that may be related to failures in tomcat).