Just to stir things even more... If that person is able to ssh into your machine but didn't have access to a compiler what's there to stop him from uploading and executing a pre-compiled binary that would break out of the chroot/jail/whatever? Having access to a compiler or not is moot. S/He has access to your machine..