# /etc/ssh/sshd_config

Subsystem sftp internal-sftp

Match User foo
  # will chroot foo into it's home
  # make sure to have it root writable only
  ChrootDirectory %h
  # will automatically "cd" into ~foo/rw-dir
  # that is writeable by foo
  ForceCommand internal-sftp -d /rw-dir