Fixed: Apache user (www-data) must not be able to access to the entire file system (security)
(cherry picked from commit 15ab6a4)