We distribute android devices to other developers so that they can develop on our devices. We want them to be able to install / uninstall / debug apps, but we don't want them to be able to run
adb shell and look around in the file system. Our devices are rooted. Is it possible?
It might be possible by modifying su source code. You can modify so that some commands require a password such as the shell. Create your own custom su based on the device.