-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 07/30/2012 09:41 AM, Mark Haney wrote:
On 07/27/2012 01:22 PM, David Quigley wrote:
> On 07/27/2012 12:46, Tim wrote:
>> On Fri, 2012-07-27 at 11:55 -0400, Mark Haney wrote:
>>> The problem is, no matter what I do, I get an access denied error.
>>> By default apache2 has INDEXES enabled for DOCROOT, but to be on the
>>> safe side I added a new directory directive for <DOCROOT/pics> and
>>> set INDEXES. Still nothing.
>>
>> Is your access denied error just for trying to view an index, or does
>> it happen when trying to view anything?
It happens when I try to view anything.
>>
>> Did you set that directive /after/ any opposing rules, were set? And
>> is your filepath inside the usual docroot, or outside of it? (It goes
>> inside <Directory> clauses.)
>>
>> The files, and all the directories back to the Linux /, all need to be
>> world-readable, and the directories also need to be world executable.
>>
>> e.g. /var/ /var/www/ /var/www/html/ /var/www/html/whatever-else/
>>
>> All need to have at least -------r-x directory permissions, and
>> -------r-- file permissions.
This is okay.
>>
>> -- [tim@localhost ~]$ uname -r 2.6.27.25-78.2.56.fc9.i686
>>
>> Don't send private replies to my address, the mailbox is ignored. I
>> read messages from the public lists.
>
> If he is serving from an unusual path he should use the semanage
The Apache2 setup is the default setup. DOCROOT is /var/www/html and I
simply added a new directory /var/www/html/pics to it. I tinkered with
setting a new DIRECTORY directive with the new directory and +Indexes,
allow from all just to see if it worked.
Everything I've tried seems to end up with an SELinux error. I've got it
disabled now, but haven't rebooted to see if that fixes it. It's strange,
the troubleshooter offers a couple of commands to set SELinux correctly for
what I want, but it still chokes on it.
What avc's are you seeing?
ausearch -m avc -ts recent
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla -
http://enigmail.mozdev.org/
iEYEARECAAYFAlAWlWsACgkQrlYvE4MpobOZ+ACfZhNxzZrYXg3eIRDsx8PAezex
5M4AoKCPJHPi7+BEpQfFV2y0ko9Y79w/
=9krB
-----END PGP SIGNATURE-----