Pdmenu is a curses menuing system that can be used as a restricted shell for UNIX users.
Boilerplate for my boxes:
# Define the main menu. menu:main:Machine:menu@Machine show:_Monitoring::monitoring show:_Services::services nop exit:E_xit menu:monitoring:Monitor:Local Information exec:_Online Users:truncate:echo "These users are online:";w exec:_Top::top s exec:_Cron Log::clear;sudo tail -f /var/log/cron exec:_Mail Log::clear;sudo tail -f /var/log/maillog exec:Message _Log::clear;sudo tail -f /var/log/messages nop exit:E_xit menu:services:Services:Manage local services exec:Restart _DAAP:truncate:sudo /sbin/service daapd restart exec:Restart _SlimServer:truncate:sudo /sbin/service slimserver restart exec:Restart S_amba:truncate:sudo /sbin/service smb restart exec:Restart _VNC:truncate:sudo /sbin/service vncserver restart exec:Restart _Rendezvous:truncate:sudo /sbin/service rendezvous restart nop exit:E_xit
Boilerplate/etc/sudoers entries:
menu ALL=NOPASSWD: /usr/bin/tail -f /var/log/messages,\ /usr/bin/tail -f /var/log/maillog,\ /usr/bin/tail -f /var/log/auth,\ /usr/bin/tail -f /var/log/cron,\ /sbin/service daapd restart,\ /sbin/service slimserver restart,\ /sbin/service smb restart,\ /sbin/service vncserver restart,\ /sbin/service rendezvous restart