apache problem?

[Stephen Smalley]

On Fri, 2004-11-05 at 06:09, Thomas Liesner wrote:
> I think this has to do with selinux. The corresponding entries
> in /var/log/messages are:
> 
> > Nov  5 12:04:55 fusie kernel: audit(1099652695.277:0): avc:  denied  { getattr } for  pid=4587 exe=/usr/sbin/httpd path=/home/thomas/public_html dev=hda3 ino=1456101 scontext=root:system_r:httpd_t tcontext=user_u:object_r:user_home_t tclass=dir

/sbin/restorecon -R /home/thomas/public_html

By default, the policy prohibits apache from reading your home
directory, but if you assign appropriate security labels to your
public_html subdirectory using the above command, it should allow access
to that subdirectory.

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency