confining user and group to linux