Topic: limited shell access via ssh

[mark]

Hi
On SME 6.0
I need to give users remote limited shell access so that they can :
rsync using -e ssh
execute some scripts eg ssh user@host scriptname
setup port forwarding using ssh.

doing the above is no problem and works fine but I am concerned about security and dont want any interactive logons and ideally I want to control which programs that they can run. I want to control this from server side either through $USER/.ssh/config or shell settings.

any suggestions?

cheers

Mark