Is it possible to have bashrc grab every single command the user types, save for those containing a given word?Like the way you can use aliases to change what the user meant, you can alias for instance 'cd' to nothing. that way the user can't apply that command anymore.Maybe that way you can have a given user only able to apply one command?
Bashrc disable-ing all but a given command for a given user
shell;account restrictions
If you only need users to access files remotely with sftp or rsync, but not be able to run shell commands, then use rssh or scponly.If you need users to be able to run only a few programs, set a restricted shell for them, such as rbash or rksh. In a restricted shell, PATH cannot be changed and only programs in the path can be executed. Beware not to allow programs that allow the user to run other programs, such as the ! or | command in vi. Access to files remains controlled by the file permissions.