Hi
I do mount my /usr partition as ro and have a separate /usr/local partition. My /tmp and /var are separate partitions as well. I will take special care when mounting these on my new server.
Fedora core 3 and RHEL 4/clones have SELinux protection for apache. You might want to look into it