I'm no expert, but I can poke around. I think a chroot jail is about the best option here. Usually sftp software will have some docs about setting up such a jail.
I can't think of any other way to do it (right).
I've used
http://vsftpd.beasts.org/ and it was pretty easy to get going for a simple config.