/usr/sbin/apache oXA {
	/usr/share r
	/etc r
	/etc/grsec h
	/etc/ld.so.cache r
	/tmp rwx
	/lib rx
	/usr/lib rx
	/var/log/apache a
	/var/run/apache.pid w
	/var/run/mysqld/mysqld.sock rw
	/var/www rx
	/dev/null rw
	/bin/bash x
	/usr/sbin/apache x
	/

	-CAP_ALL
	+CAP_DAC_OVERRIDE
	+CAP_KILL
	+CAP_SETGID
	+CAP_SETUID
	+CAP_NET_BIND_SERVICE

	RES_CRASH 1 10m

	connect {
		0.0.0.0/0:53 dgram udp
	}

	bind {
		0.0.0.0/0:80 stream tcp
	}
}
