3

As per title - I have a server running wherein I can access index.html placed in the document root (/var/www/html), but not any subdirectories within the document root.

Permissions on root index:

$ namei -l /var/www/html/index.html
f: /var/www/html/index.html
dr-xr-xr-x root   root   /
drwxr-xr-x root   root   var
drwxr-xr-x root   apache www
drwxr-x--- myuser apache html
-rwxr-x--- myuser apache index.html

Permissions on subdirectory index:

$ namei -l /var/www/html/foo/bar/index.html          
f: /var/www/html/foo/bar/index.html
dr-xr-xr-x root   root   /
drwxr-xr-x root   root   var
drwxr-xr-x root   apache www
drwxr-x--- myuser apache html
drwxr-x--- myuser apache foo
drwxr-x--- myuser apache bar
-rwxr-x--- myuser apache index.html

Security context info on /var/www/html:

$ ls -Z /var/www/html
drwxr-x---. myuser apache unconfined_u:object_r:httpd_sys_content_t:s0 cszg
-rwxr-x---. myuser apache unconfined_u:object_r:httpd_sys_content_t:s0 index.html

Security context info on /var/www/html/foo/bar:

$ ls -Z /var/www/html/foo/bar                        
-rwxr-x---. myuser apache unconfined_u:object_r:user_home_t:s0 3rdpartylicenses.txt
-rwxr-x---. myuser apache unconfined_u:object_r:user_home_t:s0 es2015-polyfills.24633e0ae24ffe204041.js
-rwxr-x---. myuser apache unconfined_u:object_r:user_home_t:s0 favicon.ico
-rwxr-x---. myuser apache unconfined_u:object_r:user_home_t:s0 index.html
-rwxr-x---. myuser apache unconfined_u:object_r:user_home_t:s0 main.38de9b2b74351642ba79.js
-rwxr-x---. myuser apache unconfined_u:object_r:user_home_t:s0 pdfjsWorker.382cb0cf8fa9c06b8500.js
-rwxr-x---. myuser apache unconfined_u:object_r:user_home_t:s0 polyfills.e1e93dfb20909209aa48.js
-rwxr-x---. myuser apache unconfined_u:object_r:user_home_t:s0 runtime.1f744383c7edc51f6732.js
-rwxr-x---. myuser apache unconfined_u:object_r:user_home_t:s0 styles.9e51190222492c49b9b3.css

Finally, here's the relevant parts of httpd.conf:

User apache
Group apache

DocumentRoot "/var/www/html"

<Directory />
    AllowOverride None
    DirectoryIndex index.html
    Require all denied
</Directory>
<Directory "/var/www/html">
    Options FollowSymLinks
    Require all granted
</Directory>

The error logs indicate this is a permissions problem (AH00132), but as far as I can see the permissions are exactly the same for the root index and the subdir index?

Ian Knight
  • 131
  • 3

0 Answers0