httpd permission problem

Daniel J Walsh dwalsh at redhat.com
Mon Feb 18 14:07:33 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/16/2013 12:37 PM, Dominick Grift wrote:
> On Sat, 2013-02-16 at 17:12 +0100, Gergely Buday wrote:
>> Hi there,
>> 
>> I got the advice on the Apache mailing list that this might be an selinux
>> problem.
>> 
>> I have a directory under my home dir, and I would like that Apache served
>> that. It says 403 Forbidden. I have created a web group that includes my
>> user and apache. It is set in the httpd.conf file. After using chcon, ls
>> -Z tells me
>> 
>> drwxr-x---. gergoe web    system_u:object_r:httpd_sys_content_t:s0
>> wordpress
>> 
>> and the same for all the files under. Still, I cannot access the content
>> in that dir.
>> 
>> What else should I set?
>> 
> Does it work if you test it in permissive mode?:
> 
> setenforce 0 getenforce ! do test setenforce 1 getenforce
> 
> if it works in permissive mode but not in enforcing mode than it is likely
> selinux blocking
> 
> if it does not work in permissive mode either then  its likely not an 
> selinux related issue
> 
> 
>> - Gergely -- selinux mailing list selinux at lists.fedoraproject.org 
>> https://admin.fedoraproject.org/mailman/listinfo/selinux
> 
> 
> -- selinux mailing list selinux at lists.fedoraproject.org 
> https://admin.fedoraproject.org/mailman/listinfo/selinux
> 
getsebool httpd_enable_homedirs

This boolean has to be turned on for this to work.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlEiNaUACgkQrlYvE4MpobPNXwCdEHa8LIYOBsCCIpGC1ZboEGZe
QUMAnR1CzNvW1k9GP2vfaxNhQ3YOPB9t
=KJ5J
-----END PGP SIGNATURE-----


More information about the selinux mailing list