Not a problem. Posting here for the history.. Thanks -----Original Message----- From: Gustavo Villaran [mailto:gvillaran@xxxxxxxxxxxxxx] Sent: Thursday, September 15, 2005 4:29 PM To: Thistle, Scott Subject: RE: [users@httpd] Problem accesing html pages on RHEL 4 with apache thx scott its ok now. El jue, 15-09-2005 a las 16:16 -0230, Thistle, Scott escribió: > Or see below: > > How do I make a user public_html directory work under SELinux? > > A: This process presumes that you have enabled user public HTML directories in Apache HTTP configuration (/etc/httpd/conf/httpd.conf). This process only covers serving static Web content. For more information about Apache HTTP and SELinux, refer to http://fedora.redhat.com/docs/selinux-apache-fc3/. > > If you do not already have one, you will need to create the public_html directory and populate it with the files and folders to be served. > > cd ~ > mkdir public_html > cp /path/to/content ~/public_html > At this point, httpd is configured to serve the contents, but you will still receive a 403 forbidden error. This is because httpd is not allowed to read the security type for the directory and files as they are created in the user's home directory. To solve this, change the security context of the folder and its contents recursively using the -R option: > > ls -Z -d public_html/ > drwxrwxr-x auser auser user_u:object_r:user_home_t public_html > chcon -R -t httpd_user_content_t public_html/ > ls -Z -d public_html/ > drwxrwxr-x auser auser user_u:object_r:httpd_user_content_t public_html/ > ls -Z public_html/ > -rw-rw-r-- auser auser user_u:object_r:httpd_user_content_t bar.html > -rw-rw-r-- auser auser user_u:object_r:httpd_user_content_t baz.html > -rw-rw-r-- auser auser user_u:object_r:httpd_user_content_t foo.html > You may notice at a later date that the user field, set here to user_u, is changed to system_u. This does not affect how the targeted policy works; the field that matters is the type field. > > > > > -----Original Message----- > From: Gustavo Villaran [mailto:gvillaran@xxxxxxxxxxxxxx] > Sent: Thursday, September 15, 2005 3:50 PM > To: Thistle, Scott > Subject: RE: [users@httpd] Problem accesing html pages on RHEL 4 with apache > > ok but how i can do that? > > thanks for the help > > El jue, 15-09-2005 a las 15:40 -0230, Thistle, Scott escribió: > > I have seen it before when selinux was enabled. Disable it for Apache. > > > > See > > > > http://fedora.redhat.com/docs/selinux-faq-fc3/index.html#faq-div-control > > ling-selinux > > > > -----Original Message----- > > From: Gustavo Villaran [mailto:gvillaran@xxxxxxxxxxxxxx] > > Sent: Thursday, September 15, 2005 3:26 PM > > To: users@xxxxxxxxxxxxxxxx > > Subject: [users@httpd] Problem accesing html pages on RHEL 4 with apache > > > > Hi im using RHEL4 with apache,have put some pages on the html directory > > but i still biw the apache default welcome page, when i see the > > error_log it give me this: > > > > [Thu Sep 15 12:25:23 2005] [error] [client 192.168.1.189] (13)Permission > > denied: access to /index.php denied > > [Thu Sep 15 12:25:23 2005] [error] [client 192.168.1.189] File does not > > exist: /var/www/html/favicon.ico > > > > > > httpd is running with apache user and the files inside html directory > > have 755 permissions....i dont know to much of linux its my first time > > with this...anyone can help me please. > > > > thanks > > > > > > --------------------------------------------------------------------- > > The official User-To-User support forum of the Apache HTTP Server > > Project. > > See <URL:http://httpd.apache.org/userslist.html> for more info. > > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > > > > > > > > > > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|