Also, maybe consider using Bastille Linux to lock it down a bit tighter. All depends on how secure and what you want to allow them to be able to do. See: http://www.bastille-linux.org/