Ensure noexec option on /home partition

Description

The noexec mount option must be set on the /home partition to prevent direct execution of binaries placed there by users.

Rationale

Preventing execution on /home stops users from running unauthorized or malicious programs from their home directories, reducing the risk of privilege escalation and unauthorized code execution.

Framework references

Live verification