Re: [CentOS] Apache, SELinux, and document root on a different partition

Kenneth Porter wrote:

Here's what I'm seeing logged. (Newlines added to make it easier to see the log line boundaries with wrapping.) It looks like it's failing to traverse the root directory to get to the directory with the content in it, but why doesn't it fail on /var/www/html or home directory content, which must also do that?

type=AVC msg=audit(1228142052.656:3183659): avc: denied { search } for pid=29382 comm="httpd" name="/" dev=cciss/c0d2p1 ino=2 scontext=user_u:system_r:httpd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

Try this:

# grep httpd /var/log/audit/audit.log | audit2why

The output should explain why you are getting the permission denials.

Rick