Limit access in Ubuntu

can we use semantec or any kind of software in ubuntu/linux to limit access of a user to edit a specific file?
example:::
a. will not play media player or use usb.

we will edit blacklist.conf to do this. however user should still be able to do apt-get install, shutdown, edit other files etc.

is there a software like this? is this possible?

You can set permissions to executables in way that user will not able to access (with chmod).