I have httpd running fine on a newly installed FC6 but i can't achieve httpd to serve user's public_html directory. I commented 'UserDir disable' and added 'UserDir public_html' in httpd.conf but when i try to go to http://localhost/~tanguy/ i obtain You don't have permission to access /~tanguy/ on this server. Is there something to do with selinux or permissions ? Thanks
Eric
Tanguy Eric wrote:
I have httpd running fine on a newly installed FC6 but i can't achieve httpd to serve user's public_html directory. I commented 'UserDir disable' and added 'UserDir public_html' in httpd.conf but when i try to go to http://localhost/~tanguy/ i obtain You don't have permission to access /~tanguy/ on this server. Is there something to do with selinux or permissions ?
Check /var/log/messages for any selinux intervention, /var/log/httpd/error_log for apache hints.
-Andy
Le dimanche 29 octobre 2006 à 20:44 +0000, Andy Green a écrit :
Tanguy Eric wrote:
I have httpd running fine on a newly installed FC6 but i can't achieve httpd to serve user's public_html directory. I commented 'UserDir disable' and added 'UserDir public_html' in httpd.conf but when i try to go to http://localhost/~tanguy/ i obtain You don't have permission to access /~tanguy/ on this server. Is there something to do with selinux or permissions ?
Check /var/log/messages for any selinux intervention, /var/log/httpd/error_log for apache hints.
-Andy
I think it's a selinux problem : Oct 29 22:38:30 bureau kernel: audit(1162157910.280:5): avc: denied { getattr } for pid=2341 comm="httpd" name="public_html" dev=dm-0 ino=5243211 scontext=sy stem_u:system_r:httpd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=dir
but i don't speak fluently selinux ...
someone could help me to understand this and find a solution ? Thanks
Eric
Tanguy Eric schrieb:
I think it's a selinux problem : Oct 29 22:38:30 bureau kernel: audit(1162157910.280:5): avc: denied { getattr } for pid=2341 comm="httpd" name="public_html" dev=dm-0 ino=5243211 scontext=sy stem_u:system_r:httpd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=dir
but i don't speak fluently selinux ...
someone could help me to understand this and find a solution ? Thanks
Eric
http://www.google.com/search?hl=en&lr=&c2coff=1&q=Fedora+SELinux...
and please use the cached site as the wiki is still under maintenance.
Alexander
Le dimanche 29 octobre 2006 à 22:50 +0100, Alexander Dalloz a écrit :
Tanguy Eric schrieb:
I think it's a selinux problem : Oct 29 22:38:30 bureau kernel: audit(1162157910.280:5): avc: denied { getattr } for pid=2341 comm="httpd" name="public_html" dev=dm-0 ino=5243211 scontext=sy stem_u:system_r:httpd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=dir
but i don't speak fluently selinux ...
someone could help me to understand this and find a solution ? Thanks
Eric
http://www.google.com/search?hl=en&lr=&c2coff=1&q=Fedora+SELinux...
and please use the cached site as the wiki is still under maintenance.
Alexander
Thanks for the pointer but what do you mean by the cached site ?
Eric
Tanguy Eric schrieb:
http://www.google.com/search?hl=en&lr=&c2coff=1&q=Fedora+SELinux...
and please use the cached site as the wiki is still under maintenance.
Alexander
Thanks for the pointer but what do you mean by the cached site ?
Eric
Well, the first hit is http://fedora.redhat.com/docs/selinux-apache-fc3/sn-user-homedir.html. As the site is still down you will have to use google's caching to read the content.
Alexander
On Sun, 2006-10-29 at 22:43 +0100, Tanguy Eric wrote:
Le dimanche 29 octobre 2006 à 20:44 +0000, Andy Green a écrit :
Tanguy Eric wrote:
I have httpd running fine on a newly installed FC6 but i can't achieve httpd to serve user's public_html directory. I commented 'UserDir disable' and added 'UserDir public_html' in httpd.conf but when i try to go to http://localhost/~tanguy/ i obtain You don't have permission to access /~tanguy/ on this server. Is there something to do with selinux or permissions ?
Check /var/log/messages for any selinux intervention, /var/log/httpd/error_log for apache hints.
-Andy
I think it's a selinux problem : Oct 29 22:38:30 bureau kernel: audit(1162157910.280:5): avc: denied { getattr } for pid=2341 comm="httpd" name="public_html" dev=dm-0 ino=5243211 scontext=sy stem_u:system_r:httpd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=dir
but i don't speak fluently selinux ...
someone could help me to understand this and find a solution ? Thanks
---- you could wait around or you could go to 'Security Level and Firewall' (system-config-securitylevel)
and either change from Enforcing to Permissive (I think this requires reboot) or modify Security Policy => HTTPD => 'Allow HTTPD to read home directories' is checked and if necessary, as root...
fixfiles relabel /home
(doing this from memory - you might want to reference man pages)
Craig
Le dimanche 29 octobre 2006 à 14:55 -0700, Craig White a écrit :
On Sun, 2006-10-29 at 22:43 +0100, Tanguy Eric wrote:
Le dimanche 29 octobre 2006 à 20:44 +0000, Andy Green a écrit :
Tanguy Eric wrote:
I have httpd running fine on a newly installed FC6 but i can't achieve httpd to serve user's public_html directory. I commented 'UserDir disable' and added 'UserDir public_html' in httpd.conf but when i try to go to http://localhost/~tanguy/ i obtain You don't have permission to access /~tanguy/ on this server. Is there something to do with selinux or permissions ?
Check /var/log/messages for any selinux intervention, /var/log/httpd/error_log for apache hints.
-Andy
I think it's a selinux problem : Oct 29 22:38:30 bureau kernel: audit(1162157910.280:5): avc: denied { getattr } for pid=2341 comm="httpd" name="public_html" dev=dm-0 ino=5243211 scontext=sy stem_u:system_r:httpd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=dir
but i don't speak fluently selinux ...
someone could help me to understand this and find a solution ? Thanks
you could wait around or you could go to 'Security Level and Firewall' (system-config-securitylevel)
and either change from Enforcing to Permissive (I think this requires reboot) or modify Security Policy => HTTPD => 'Allow HTTPD to read home directories' is checked and if necessary, as root...
I have already done this without any chances ...
fixfiles relabel /home
Maybe i have to try this but it seems to want to relabel all the file systems and not only /home.
(doing this from memory - you might want to reference man pages)
Craig
Eric
Le dimanche 29 octobre 2006 à 23:01 +0100, Tanguy Eric a écrit :
Le dimanche 29 octobre 2006 à 14:55 -0700, Craig White a écrit :
On Sun, 2006-10-29 at 22:43 +0100, Tanguy Eric wrote:
Le dimanche 29 octobre 2006 à 20:44 +0000, Andy Green a écrit :
Tanguy Eric wrote:
I have httpd running fine on a newly installed FC6 but i can't achieve httpd to serve user's public_html directory. I commented 'UserDir disable' and added 'UserDir public_html' in httpd.conf but when i try to go to http://localhost/~tanguy/ i obtain You don't have permission to access /~tanguy/ on this server. Is there something to do with selinux or permissions ?
Check /var/log/messages for any selinux intervention, /var/log/httpd/error_log for apache hints.
-Andy
I think it's a selinux problem : Oct 29 22:38:30 bureau kernel: audit(1162157910.280:5): avc: denied { getattr } for pid=2341 comm="httpd" name="public_html" dev=dm-0 ino=5243211 scontext=sy stem_u:system_r:httpd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=dir
but i don't speak fluently selinux ...
someone could help me to understand this and find a solution ? Thanks
you could wait around or you could go to 'Security Level and Firewall' (system-config-securitylevel)
and either change from Enforcing to Permissive (I think this requires reboot) or modify Security Policy => HTTPD => 'Allow HTTPD to read home directories' is checked and if necessary, as root...
I have already done this without any chances ...
fixfiles relabel /home
Maybe i have to try this but it seems to want to relabel all the file systems and not only /home.
(doing this from memory - you might want to reference man pages)
Craig
Eric
I modified the context of public_html and now it works fine. Thanks
Eric
On Oct 29, 2006, at 2:24 PM, Tanguy Eric wrote:
I have httpd running fine on a newly installed FC6 but i can't achieve httpd to serve user's public_html directory. I commented 'UserDir disable' and added 'UserDir public_html' in httpd.conf but when i try to go to http://localhost/~tanguy/ i obtain You don't have permission to access /~tanguy/ on this server. Is there something to do with selinux or permissions ? Thanks
Eric
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
You need to give apache at least execution rights to your home folder so it can reach your public_html folder in it. ( chmod 711 /home/user )
EJ
Le dimanche 29 octobre 2006 à 15:51 -0500, redhatdude@bellsouth.net a écrit :
On Oct 29, 2006, at 2:24 PM, Tanguy Eric wrote:
I have httpd running fine on a newly installed FC6 but i can't achieve httpd to serve user's public_html directory. I commented 'UserDir disable' and added 'UserDir public_html' in httpd.conf but when i try to go to http://localhost/~tanguy/ i obtain You don't have permission to access /~tanguy/ on this server. Is there something to do with selinux or permissions ? Thanks
Eric
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
You need to give apache at least execution rights to your home folder so it can reach your public_html folder in it. ( chmod 711 /home/user )
EJ
It's already like this i suspect a selinux problem.
Eric