Restricting user accounts
I made an account on my webserver for my brother. The document root for my website is /var/www/html, and I made a folder within html called "~hisname" which is where I want him to put his website. When I created his user account, I made his home directory /var/www/html/~hisname, so when he logs in via FTP he's automatically in that directory. What I want to do is prevent him from changing to ANY OTHER DIRECTORY, unless it's one that he's made within ~hisname. So shouldn't be able to cd to any directory or ls in any directory but his own. Is there an easy way to do this? Or do I have to change the permissions on all of my directories or something like that?