Socket Restrictions by User/Group

[frank-n-f]

Is it possible to allow a specific user such as the one apache runs under to ONLY be allowed to open a port such as 80 and/or 443 to prevent a backdoor from being installed if a bad guy exploited the service.

If so how do I do it?

[Sleight of Mind]

you can do this using the ACL system, read the documentation that comes with it for more information.