Re: [CentOS] Apache, SELinux, and document root on a different partition

2008-12-01 Thread Kenneth Porter
--On Sunday, November 30, 2008 9:02 AM -0500 Ignacio Vazquez-Abrams [EMAIL PROTECTED] wrote: You forgot one important bit: the actual denials. I don't find anything in /var/log/audit/audit.log nor /var/log/messages. audit.log looks like the right place but it's not logged anything since

Re: [CentOS] Apache, SELinux, and document root on a different partition

2008-12-01 Thread Kenneth Porter
Here's what I'm seeing logged. (Newlines added to make it easier to see the log line boundaries with wrapping.) It looks like it's failing to traverse the root directory to get to the directory with the content in it, but why doesn't it fail on /var/www/html or home directory content, which

Re: [CentOS] Apache, SELinux, and document root on a different partition

2008-12-01 Thread Rick Barnes
Kenneth Porter wrote: Here's what I'm seeing logged. (Newlines added to make it easier to see the log line boundaries with wrapping.) It looks like it's failing to traverse the root directory to get to the directory with the content in it, but why doesn't it fail on /var/www/html or home

Re: [CentOS] Apache, SELinux, and document root on a different partition

2008-12-01 Thread Kenneth Porter
On Monday, December 01, 2008 10:26 AM -0500 Rick Barnes [EMAIL PROTECTED] wrote: Try this: # grep httpd /var/log/audit/audit.log | audit2why The output should explain why you are getting the permission denials. Alas, it didn't really tell me more than what I could see in the log lines.

[CentOS] Apache, SELinux, and document root on a different partition

2008-11-30 Thread Kenneth Porter
I want to put the document root for an application on a separate paritition that has more space. When I try to configure this I can't access the files in the new location. I've got the SELinux attributes set on the directory and its files, so I'm thinking it's something about the parent path

Re: [CentOS] Apache, SELinux, and document root on a different partition

2008-11-30 Thread Ignacio Vazquez-Abrams
On Sun, 2008-11-30 at 05:56 -0800, Kenneth Porter wrote: This works if I disable SELinux. You forgot one important bit: the actual denials. -- Ignacio Vazquez-Abrams [EMAIL PROTECTED] PLEASE don't CC me; I'm already subscribed signature.asc Description: This is a digitally signed message