I would like to create an SSH account on my Mac to allow some friends to test code on my machine from the command line.
However, I want to sandbox them, so that the only folders/files they can see are those owned by them within their user folder. All other user folders, the application folder, etc, would be hidden. Ideally external volumes would also be hidden.
Is this possible to do with a standard user account? (The other accounts on the system are admin accounts) Is the guest account a better choice?