Boris Epstein wrote:
I found an even simplier solution - disabled SELinux. I've got a firewall and that is plenty.
Wow, not sure I'd place all my faith in a firewall.
There is an SELinux tutorial on the Wiki that explicitly covers how to handle Apache serving content outside of DocumentRoot:
http://wiki.centos.org/HowTos/SELinux
Anyway, it's only one command to fix the issue - not exactly daunting.