[CentOS] Best way to secure apache web root

[Stephen Nelson-Smith]

Hi,

>> What is the most secure way to implement this?
>>
>> I am thinking:
>>
>> chown -R root:apache /var/www/html
>> chmod -R 0750 /var/www/html
>> chown apache:apache for where need to write
>
> Yes, use acl and selinux.

Could you expand?  Have you an example you could point me at?  I'm
happy to read any relevant documentation, but having a map helps.

S.