restrict users from seeing each other

[Kevin Coyner <kevin@rustybear.com>]

I've got a server that was set up a while ago.  During that setup, it
asked whether user accounts should be able to see each other's
/home/useracct directories.  At that time I answered yes (o.k. to see
everyone's directories) as it didn't matter.

Of course, now it matters. :-)

Is there an easy way of getting this set up so that users only see their
own /home directories?

Obviously I can do this by:

1.  setting each users /home/username to chmod 0750
2.  making programs such as Apache, which runs as www-data, part of that
user's group

Is this the right way?

Also, separate, but related question:  If a user has access via ssh, is
there any way to restrict him/her to just their /home directory?

Thanks
Kevin