I'm running a Linux server at home, and I did just have my own username (javawag) with a www folder inside it for my website. However, I've since added a subdomain for my friend, who now has his own home folder, username, and Apache virtual site (~max/www). My problem now is that my home folder, other than containing my www folder, contains some sensitive data in other folders, which I don't want him to be able to see. How can I change the permissions of home folders so that only that user and root can view/edit, and all other users don't even have read access? The catch here is that the www folder is the server root for Apache, so the user www-data needs read access to the files still!