Bug 376811 - SELinux Blocking UserDir's With Apache
Summary: SELinux Blocking UserDir's With Apache
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 8
Hardware: x86_64
OS: Linux
low
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-11-12 01:51 UTC by Michael Appleyard
Modified: 2008-01-30 19:18 UTC (History)
1 user (show)

Fixed In Version: Current
Clone Of:
Environment:
Last Closed: 2008-01-30 19:18:35 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
What the SETroucbleShoot Browser says on the matter. (1.79 KB, text/plain)
2007-11-12 01:51 UTC, Michael Appleyard
no flags Details

Description Michael Appleyard 2007-11-12 01:51:21 UTC
Description of problem:
When trying to set-up UserDir's with Apache, SELinux blocks it saying that I can
correct the problem using the command: 

setsebool -P httpd_enable_homedirs=1

However, I still get a 403 Forbidden error despite having the correct
permissions set. Disabling SELinux solves the problem, so it is definitely
SELinux related.

Using the SELinux Administration tool, I can see that under HTTPD Service,
"Allow HTTPD to read home directories" is set to true, yet it stil denies
permission.


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.Set up Apache to use user's public_html folder as their webpage home.
2.Create a public_html directory inside and chmod to 755
3.run: setsebool -P httpd_enable_homedirs=1
4.try to access http://localhost/~username/
  
Actual results:
403 Forbidden error

Expected results:
Display website

Additional info:

Comment 1 Michael Appleyard 2007-11-12 01:51:22 UTC
Created attachment 254881 [details]
What the SETroucbleShoot Browser says on the matter.

Comment 2 Daniel Walsh 2007-11-12 15:29:22 UTC
Fixed in selinux-policy-3.0.8-52.fc8

Comment 3 Daniel Walsh 2008-01-30 19:18:35 UTC
Bulk closing all bugs in Fedora updates in the modified state.  If you bug is
not fixed, please reopen.


Note You need to log in before you can comment on or make changes to this bug.