You should have a look a osh: $ apt-cache show osh Package: osh Priority: extra Section: shells Installed-Size: 67 Maintainer: Preston Smith <[EMAIL PROTECTED]> Version: 1.7-6 Depends: libc6 (>= 2.1.2), libncurses5, base-files (>= 2.1.6) Suggests: nvi Architecture: i386 Size: 45946 MD5sum: b53754d37bc5d58b8b8bc1c9afce772a Filename: dists/woody/main/binary-i386/shells/osh_1.7-6.deb Description: Operator's Shell The Operator Shell (Osh) is a setuid root, security enhanced, restricted shell. It allows the administrator to carefully limit the access of special commands and files to the users whose duties require their use, while at the same time automatically maintaining audit records. The configuration file for Osh contains an administrator defined access profile for each authorized user or group.
The newest .deb in woody includes a white paper explaining the cocepts behind it. Looks close to what you're searching. Greetings, joachim