You could use any of the restricted shells..
r*sh, rbash is bash in restricted mode, rsh is sh in restricted mode.
http://www.lns.cornell.edu/public/CO...f_7.html#SEC77
As default BSD will trap users in a restricted mode, if their shell is beginning with a 'r'