I'm trying to create a restricted shell for a maintenance user. This user should only be allowed to execute a single bash script within his home folder.
The user should not be allowed to execute any other command or even change the folder. This should work for both SSH and for a normal terminal login directly on the system.
I'm trying to set up this on a Fedora AtomicHost OS. IMHO the best way to do this is by using chroot. But I'm running into some issues, because /bin/su is not working within the chroot environment.
Is there any alternative to chroot?