Folks;
I'd like to create a group on my Linux box & add a few users to it.
Is there a way to do so and restrict this group/users to have access to only one or directory trees?
Let's say i need this group to only have a read write access to only these two directories /opt/Virtu & /fsn/comers

How can i do so?

Your help is very much appreciated

One way is to chroot those users to some directory - /home/whatever - with links to those two directories plus /usr - or you can copy just the utilities you want them to have down into a local /usr directory.

This is what is done with FTP accounts for example, where they are only allowed to mess around in one directory tree.

Thanks Jim
but i'm not sure if i fully understand your solution. any clarification?

cerate a dir.
change the group to the group you created. make the proper mode changes (rwx)
is not hard. you just need to calm down, and , if it helps, lay down some concept schematics on a paper

Thanks Broli;
I'm aware of the creating/changing directories process. I was asking about how to restrict this group/users to have access to only one or directory trees?
Let's say i need this group to only have a read write access to only these two directories /opt/Virtu & /fsn/comers

Katkota

suposing that /opt/Virtu has this permissions
-rwxrwxrwx root root
and you created the group virtu
chwon root:virtu /opt/Virtu
chmod 770
andmake the users youw ant, to be part of the virtu group

or maybe im not getting your question ...

Be aware that the users will still be allowed on world writable directories (such as /tmp). Otherwise, you will got to stick with mcnamara's opinion on chroot(). Still, I must say chroot() is awfully easy to bypass without the proper kernel limitations (grsecurity).