prevent users from having access to alien home dirs

[varuzam]

it fixes this issue #969

the eventual result

~# ll /home/
drwx-----x. 3 test1 vstsecure    4.0K Apr  9 12:31 test1
drwx-----x. 5 test2 vstsecure    4.0K Apr  9 12:33 test2

The users test1 and test2 dont have access to dir of each

[blondie101010]

The idea is not bad in itself, but that's like building a 2 foot high fence to protect your treasure, as it would not stop the web process from having access to those alien directories.

I don't see a reason against it, but simply wanted to point out that it may give a false sense of security.

[varuzam]

It protects if webapp is running as fastcgi. In this case apache doesnt execute any user's code

[Neustradamus]

Dear all,

@Dennis-SEG has done a very good job here:

• Complete modernization: PHP 8.0-8.4 support, React 18, and security hardening #2322

What do you think?