SSH access restrictions

[Rudi Starcevic <rudi@oasis.net.au>]

Hi,

Is there anyway to resistict  a non-root user's shell account ?

For example once he/she is logged in is there any way to deny, say, 
reading the /etc/passwd file ?
Can they be restricted like the way a user can be restricted using FTP ?

I know I could use a tool like Snort to watch whats going out , for 
example /etc/passwd, except
using SSH because it's encrypted.

To my knowledge so far I cannot prevent an SSH user from reading system 
files.

Cheers
Rudi.