SELinux Permission for download a file.

[Jason Long]

Hello,
I created a file under of my root website and when I want to download it then:

# wget https://URL.com/file.txt
--2020-10-06 23:53:22--  https://URL.com/file.txt
Resolving URL.com (URL.com)... 80.253.145.77
Connecting to URL.com (URL.com)|80.253.145.77|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2020-10-06 23:53:22 ERROR 403: Forbidden.

The SELinux label of file is:

-rwxr-xr-x.  1 apache apache unconfined_u:object_r:user_home_t:s0          95849 Oct  6
23:51 file.txt

How can I solve it?

Thank you.

[ITwrx]

On 10/6/20 3:31 PM, Jason Long wrote:
>  Hello,
>  I created a file under of my root website and when I want to download it then:
>
>  # wget https://URL.com/file.txt
>  --2020-10-06 23:53:22--  https://URL.com/file.txt
>  Resolving URL.com (URL.com)... 80.253.145.77
>  Connecting to URL.com (URL.com)|80.253.145.77|:443... connected.
>  HTTP request sent, awaiting response... 403 Forbidden
>  2020-10-06 23:53:22 ERROR 403: Forbidden.
>
>  The SELinux label of file is:
>
>  -rwxr-xr-x.  1 apache apache unconfined_u:object_r:user_home_t:s0          95849 Oct  6
> 23:51 file.txt
>
>  How can I solve it?
>
>  Thank you.
>  _______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]... 
you're not showing a selinux denial in what you've posted, so maybe it's
just your normal file perms, apache config, etc and not selinux at all?

[Jason Long]

SELinux denial? How?






On Wednesday, October 7, 2020, 07:51:02 AM GMT+3:30, ITwrx <info(a)itwrx.org&gt; wrote: 





On 10/6/20 3:31 PM, Jason Long wrote:

>  Hello,
>  I created a file under of my root website and when I want to download it then:
>
>  # wget https://URL.com/file.txt
>  --2020-10-06 23:53:22--  https://URL.com/file.txt
>  Resolving URL.com (URL.com)... 80.253.145.77
>  Connecting to URL.com (URL.com)|80.253.145.77|:443... connected.
>  HTTP request sent, awaiting response... 403 Forbidden
>  2020-10-06 23:53:22 ERROR 403: Forbidden.
>
>  The SELinux label of file is:
>
>  -rwxr-xr-x.  1 apache apache unconfined_u:object_r:user_home_t:s0          95849 Oct  6
> 23:51 file.txt
>
>  How can I solve it?
>
>  Thank you. 
>  _______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]... 
you're not showing a selinux denial in what you've posted, so maybe it's
just your normal file perms, apache config, etc and not selinux at all?
_______________________________________________
selinux mailing list -- selinux(a)lists.fedoraproject.org
To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[e-mail]...

[ITwrx]

On 10/7/20 1:46 AM, Jason Long wrote:
>  SELinux denial? How? 
i know it's easy to just quickly respond with a new question when
someone brings up something you have questions about (i've done it a few
times, myself), but please consider stopping to think what *you can do
about it* first. You probably don't want people thinking you are a Help
Vampire [1] and deciding not to help you. In this case, a web search for
"SELinux denial" should answer your question. If you don't find any
denials related to the serving of that file, then please investigate my
other point about file perms and apache config.

1: http://jasonwryan.com/blog/2012/03/17/vampires/

[Paul Howarth]

On Tue, 6 Oct 2020 20:31:41 +0000 (UTC)
Jason Long <hack3rcon(a)yahoo.com&gt; wrote:

>  Hello,
>  I created a file under of my root website and when I want to download
>  it then:
>  
>  # wget https://URL.com/file.txt
>  --2020-10-06 23:53:22--  https://URL.com/file.txt
>  Resolving URL.com (URL.com)... 80.253.145.77
>  Connecting to URL.com (URL.com)|80.253.145.77|:443... connected.
>  HTTP request sent, awaiting response... 403 Forbidden
>  2020-10-06 23:53:22 ERROR 403: Forbidden.
>  
>  The SELinux label of file is:
>  
>  -rwxr-xr-x.  1 apache apache unconfined_u:object_r:user_home_t:s0
>       95849 Oct  6 23:51 file.txt
>  
>  How can I solve it? 
Simplest way is probably to label the file with a suitable context type
that the web server can read, e.g. httpd_sys_content_t

chcon -t httpd_sys_content_t /path/to/file.txt

Paul.