I would like to run some applications supplied by my clients on my vm but I want to limit their access.
I wanted to know if I create them a user that can only read/write/execute files on their $home directory and then execute their application with this command
sudo -H -u <client_user> bash -c "command to run their app" would be secure.
EDIT: The applications supplied by my clients would be executed from a NodeJs server on the vm. So, I don't want them to read/write/execute files from the other applications that have been started from the same NodeJs server.