How gain access to DocumentRoot contents of Apache-httpd through a Web browser which is set to point to the Home folder of the User?

Bryn M. Reeves bmr at redhat.com
Thu Apr 14 10:12:45 UTC 2011


On 04/14/2011 11:06 AM, Bryn M. Reeves wrote:
> On 04/14/2011 10:39 AM, Varuna Seneviratna wrote:
>> When I try to Access the DocumentRoot which is /home/<User
>> Name>/public_html by typing http://localhost I get a 403 Forbidden
>> Page.What should I do gain Access to DocumentRoot Contents?
> 
> If you're getting a 403 then something is denying the web server access to those
> paths. If you have set the directory permissions correctly (iirc you need other
> execute on the home directory (search permission) and other read/execute on the
> public_html directory and its subdirectories) the you may need to set up SELinux
> contexts for the directory if you have it enabled on your system.
> 
> I normally do this by using a reference from /var/www/html since it is installed
> with the correct context for httpd content:
> 
> chcon -R --reference=/var/www/html public_html/

Heh, thought I might be out of date here.. I think that the correct context for
home directory web content is now httpd_user_content_t (although I think
httpd_sys_content_t still works - an SELinux expert can probably explain exactly
why that's wrong or a bad idea but it certainly means there's no separation
between user and system content so the policy can't distinguish them ;).

More info in this bug:

https://bugzilla.redhat.com/show_bug.cgi?id=509943

Regards,
Bryn.


More information about the users mailing list