Installing rssh to allow scp/sftp sessions only for user accounts is a breeze. Getting them into a chroot jail took a bit more reseach, but in the end turned out to be pretty easy.
This is on CentOS 4.6, but this technique should work almost identically for any Linux system thanks to the l2chroot script.