Chrooted SFTP user with disabled shell access

Open /etc/sshd/sshd.conf and enable if disabled:
Subsystem sftp internal-sftp

Add following lines at the end:
Match group sftponly # or Match user someuser
ChrootDirectory /home/%u
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp