Re: After reboot of web-server accessing website shows "Forbidden", restarting httpd all is fine

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



sorry, late reply.
thanks, one part was a path.

jobst


On Mon, Nov 09, 2015 at 09:40:44AM -0800, Gordon Messmer (gordon.messmer@xxxxxxxxx) wrote:
> On 11/06/2015 06:30 PM, Jobst Schmalenbach wrote:
> >Putting selinux into permissive mode starts the server right from boot.
> >Looking at all the logs I cannot see anything.
> 
> Which logs?  You should see AVC denies logged in /var/log/audit/audit.log,
> unless you've disabled audit logging.
> 
> The AVCs should indicate which files are labeled incorrectly, and what their
> current label is.  You probably need to fix the tree from which you're
> serving files.
> 
> Could be just "restorecon -r -v /var/www" if you're using the default paths.
> Otherwise, you should use semanage to fix whatever paths you're using:
> 
> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security-Enhanced_Linux/sect-Security-Enhanced_Linux-SELinux_Contexts_Labeling_Files-Persistent_Changes_semanage_fcontext.html
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> https://lists.centos.org/mailman/listinfo/centos

-- 
while ( !sorted ) { do_nothing ( ) ; }

  | |0| |   Jobst Schmalenbach, jobst@xxxxxxxxxxxxxx, General Manager
  | | |0|   Barrett Consulting Group P/L & The Meditation Room P/L
  |0|0|0|   +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos



[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux