Apache2 directory listing problem F16

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/30/2012 09:41 AM, Mark Haney wrote:
> On 07/27/2012 01:22 PM, David Quigley wrote:
>> On 07/27/2012 12:46, Tim wrote:
>>> On Fri, 2012-07-27 at 11:55 -0400, Mark Haney wrote:
>>>> The problem is, no matter what I do, I get an access denied error.
>>>> By default apache2 has INDEXES enabled for DOCROOT, but to be on the
>>>> safe side I added a new directory directive for <DOCROOT/pics> and
>>>> set INDEXES.  Still nothing.
>>> 
>>> Is your access denied error just for trying to view an index, or does
>>> it happen when trying to view anything?
> 
> It happens when I try to view anything.
>>> 
>>> Did you set that directive /after/ any opposing rules, were set?  And
>>> is your filepath inside the usual docroot, or outside of it?  (It goes 
>>> inside <Directory> clauses.)
>>> 
>>> The files, and all the directories back to the Linux /, all need to be 
>>> world-readable, and the directories also need to be world executable.
>>> 
>>> e.g. /var/ /var/www/ /var/www/html/ /var/www/html/whatever-else/
>>> 
>>> All need to have at least -------r-x directory permissions, and 
>>> -------r-- file permissions.
> 
> This is okay.
> 
>>> 
>>> -- [tim at localhost ~]$ uname -r 2.6.27.25-78.2.56.fc9.i686
>>> 
>>> Don't send private replies to my address, the mailbox is ignored.  I 
>>> read messages from the public lists.
>> 
>> If he is serving from an unusual path he should use the semanage
> 
> The Apache2 setup is the default setup.  DOCROOT is /var/www/html and I
> simply added a new directory /var/www/html/pics to it.  I tinkered with
> setting a new DIRECTORY  directive with the new directory and +Indexes,
> allow from all just to see if it worked.
> 
> Everything I've tried seems to end up with an SELinux error.  I've got it 
> disabled now, but haven't rebooted to see if that fixes it.  It's strange,
> the troubleshooter offers a couple of commands to set SELinux correctly for
> what I want, but it still chokes on it.
> 
> 
> 


What avc's are you seeing?

ausearch -m avc -ts recent


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlAWlWsACgkQrlYvE4MpobOZ+ACfZhNxzZrYXg3eIRDsx8PAezex
5M4AoKCPJHPi7+BEpQfFV2y0ko9Y79w/
=9krB
-----END PGP SIGNATURE-----