I have /home symlinked to /usr/home, and all pages were
"403 Forbidden". After changing access.conf:
Things now work. Was this the proper change? Should I have
changed the directory from / to /usr? Maybe a change in the
RPM to check for symlinks on /home would be a good idea?
You alleviated the problem correctly. This is not a change for the rpm
package as much as just a apache configuration issue. Although it is
probably better to leave only /home accessible from outside due to
possible security concerns with having / as being open.