This is one that crops up often:
How to restrict the users' shell allowing to execute shell programsHow to restrict the users' shell allowing to execute shell programs
But is it the best example we can find of a 'canonical' question on which we can close duplicates?