I have Virtualmin pro installed. When I log with Usermin to an account, and select the file browser java applet, it let's me select other account names in the file browser (left side), and let's me see file and directory names. This exposes other site's email addresses, etc.
Virtualim was set up by Virtualmin staff. I'm not strong on Unix, but I understand what permissions are to some extent.
So, two questions
1) Can I (and how do I) change permissions so that this file browser doesn't see other accounts and files?
2) What should I do in general setup so that new accounts get correct permissions.