re. "
perhaps better that anything outside of /home/* not even be visible"
Indeed, agree 100% ... but I couldn't find a linux file manager that disallowed access in that way.
Could you recommend something?
It wasn't a high priority because the site is running inside a KVM virtual machine that isolates it from the main host system, and it can be easily restored from a snapshot image if it gets trashed.
It's restored to the original state once a day as well, just as a matter of policy, anyway.
But a restricted filemanager would be better, even still. TIA for any suggestions.
M.