Hi, I've asked previously on this list about inclusion of mpm-
itk (http://mpm-itk.sesse.net/) into upstream Apache;
previously, the requests have died down, mostly over discussions
on security (mpm-itk does configuration and request parsing as
uid 0, although with very limited capabilities) and arguments
along the lines of “there is no need”, e.g. various people I've
talked to feel that there are other adequate solutions for the
problem, including suexec, multiple Apache instances with
reverse proxying, or some GSoC project.
(http://wiki.apache.org/httpd/PrivilegeSeparation even claims
you can keep administrators from reading each others' sites
simply by setting setting chmod 0640, completely ignoring the
case where you can run PHP code or CGI scripts!) However, since
then mod_privileges have entered Apache trunk, which gives
similar functionality (contradicting the arguments about “no
need”), is very similar in terms of security model
(contradicting the arguments about “the model is too insecure”),
but is So