grsec2 rbac and roles for apache

[kei]

Hello.

My aim is securing apache in a way that programs invoked by it, like php_safe and perl (or any CGI), won't have the same access rights as, say, a user in the default role who is running perl. If I was going to set up an apache web server and I'd like that server to be placed in to a role like www_serv every time I run /usr/bin/apache, how would I go about it?

Many Thanks.