Description:

mod_rsbac brings some RSBAC specific features to Apache, namely:
- rsbac_jail, can jail the whole Apache environment. Work like mod_chroot.
- RC, working until now only with the Prefork MPM.

The RC module allow a SuExec-like functionality without the cost of forking
new processes, and thus much faster.
The master Apache process is assigned a role (apache-master) which is allowed
to assign to role apache-worker to the worker processes it creates (also
called childrens).
Every worker is then allowed to switch their role to a set of roles, which
represent either the different directories or virtual hosts to serve.

You can use either the Jail functions, either RC functions or both at the
same time.

Of course, you need a RSBAC enabled kernel to use mod_jail.
See http://www.rsbac.org/ or install a RSBAC enabled kernel.