grsecurity forums

Hi all,
Is it possible to leave my system mostly untouched (as far as ACL's go), but limit just specific processes from doing certain things? Such as apache.

Basically allow apache to do very specific things, but let everything else work as normal.

Thanks,
Ethan