FTP, help!



I've setup a account for my friend via the "Users" panel in System Preferences, he cannot administer..

When he connects via FTP he gets access to my whole harddrive!
I just want him to be able to access his own "home", NOTHING else!

Please help a newbie out! :D
hehe, I feel your pain.
I don't want to even have to create a new user just to enable an FTP account... Does anybody know which file needs to be edited to setup users / directories for the FTP server?
The man page is helpful:

If the user name appears in the file /etc/ftpchroot the session's root will be changed to the user's login directory by chroot.

ie: will only be able to see from their directory down.