Re: [CentOS] Help with httpd userdir recovery

2016-12-29 Thread Robert Moskowitz
Interesting, but I can't do anything until around the 9th. On 12/30/2016 01:08 AM, Gordon Messmer wrote: type=AVC msg=audit(1482944350.289:339): avc: denied { read } for pid=2141 comm="httpd" name="family" dev="sda3" ino=262199 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:obje

Re: [CentOS] Help with httpd userdir recovery

2016-12-29 Thread Gordon Messmer
> type=AVC msg=audit(1482944350.289:339): avc: denied { read } for pid=2141 > comm="httpd" name="family" dev="sda3" ino=262199 > scontext=system_u:system_r:httpd_t:s0 > tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=dir permissive=0 I ran into the same problem, I think. I ran

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Robert Moskowitz
On 12/28/2016 06:33 PM, Greg Cornell wrote: On 12/28/16, 3:28 PM, "CentOS on behalf of Robert Moskowitz" wrote: On 12/28/2016 06:13 PM, Greg Cornell wrote: On 12/28/16, 3:09 PM, "CentOS on behalf of Robert Moskowitz" wrote: On 12/28/2016 06:05 PM, J Martin Rushton wrote: On 28/12/16 2

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Greg Cornell
On 12/28/16, 3:28 PM, "CentOS on behalf of Robert Moskowitz" wrote: On 12/28/2016 06:13 PM, Greg Cornell wrote: > On 12/28/16, 3:09 PM, "CentOS on behalf of Robert Moskowitz" > wrote: > > > > On 12/28/2016 06:05 PM, J Martin Rushton wrote: >> On 28/12/16 21:24, m.r...@5-cent.us wrote: >>> Robe

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Robert Moskowitz
On 12/28/2016 06:13 PM, Greg Cornell wrote: On 12/28/16, 3:09 PM, "CentOS on behalf of Robert Moskowitz" wrote: On 12/28/2016 06:05 PM, J Martin Rushton wrote: On 28/12/16 21:24, m.r...@5-cent.us wrote: Robert Moskowitz wrote: On 12/28/2016 03:32 PM, J Martin Rushton wrote: On 28/12/16

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Greg Cornell
On 12/28/16, 3:09 PM, "CentOS on behalf of Robert Moskowitz" wrote: On 12/28/2016 06:05 PM, J Martin Rushton wrote: > > On 28/12/16 21:24, m.r...@5-cent.us wrote: >> Robert Moskowitz wrote: >>> >>> On 12/28/2016 03:32 PM, J Martin Rushton wrote: On 28/12/16 20:11, Robert Moskowitz wrote:

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Robert Moskowitz
On 12/28/2016 06:05 PM, J Martin Rushton wrote: On 28/12/16 21:24, m.r...@5-cent.us wrote: Robert Moskowitz wrote: On 12/28/2016 03:32 PM, J Martin Rushton wrote: On 28/12/16 20:11, Robert Moskowitz wrote: On 12/28/2016 01:53 PM, m.r...@5-cent.us wrote: Robert Moskowitz wrote: On 12/28/

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Robert Moskowitz
On 12/28/2016 04:24 PM, m.r...@5-cent.us wrote: Robert Moskowitz wrote: On 12/28/2016 03:32 PM, J Martin Rushton wrote: On 28/12/16 20:11, Robert Moskowitz wrote: On 12/28/2016 01:53 PM, m.r...@5-cent.us wrote: Robert Moskowitz wrote: On 12/28/2016 05:11 AM, Todor Petkov wrote: On Wed, D

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread J Martin Rushton
On 28/12/16 21:24, m.r...@5-cent.us wrote: > Robert Moskowitz wrote: >> >> >> On 12/28/2016 03:32 PM, J Martin Rushton wrote: >>> >>> On 28/12/16 20:11, Robert Moskowitz wrote: On 12/28/2016 01:53 PM, m.r...@5-cent.us wrote: > Robert Moskowitz wrote: >> On 12/28/2016 05:11 AM, T

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread m . roth
Robert Moskowitz wrote: > > > On 12/28/2016 03:32 PM, J Martin Rushton wrote: >> >> On 28/12/16 20:11, Robert Moskowitz wrote: >>> >>> On 12/28/2016 01:53 PM, m.r...@5-cent.us wrote: Robert Moskowitz wrote: > On 12/28/2016 05:11 AM, Todor Petkov wrote: >> On Wed, Dec 28, 2016 at 5:18 A

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Robert Moskowitz
On 12/28/2016 03:32 PM, J Martin Rushton wrote: On 28/12/16 20:11, Robert Moskowitz wrote: On 12/28/2016 01:53 PM, m.r...@5-cent.us wrote: Robert Moskowitz wrote: On 12/28/2016 05:11 AM, Todor Petkov wrote: On Wed, Dec 28, 2016 at 5:18 AM, Robert Moskowitz wrote: Which is why I wonder i

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread m . roth
Robert Moskowitz wrote: > On 12/28/2016 01:53 PM, m.r...@5-cent.us wrote: >> Robert Moskowitz wrote: >> Bang. I would suggest, at this point, that you might want to set selinux >> into permissive mode, so you'll get the error messages from it, and can >> work out fixes, but will let your system op

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread J Martin Rushton
On 28/12/16 20:11, Robert Moskowitz wrote: > > > On 12/28/2016 01:53 PM, m.r...@5-cent.us wrote: >> Robert Moskowitz wrote: >>> On 12/28/2016 05:11 AM, Todor Petkov wrote: On Wed, Dec 28, 2016 at 5:18 AM, Robert Moskowitz wrote: > Which is why I wonder if there is some different

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Robert Moskowitz
On 12/28/2016 01:53 PM, m.r...@5-cent.us wrote: Robert Moskowitz wrote: On 12/28/2016 05:11 AM, Todor Petkov wrote: On Wed, Dec 28, 2016 at 5:18 AM, Robert Moskowitz wrote: Which is why I wonder if there is some different config for the C7.3 version of apache. Or something with the C7-arm

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread m . roth
Robert Moskowitz wrote: > On 12/28/2016 05:11 AM, Todor Petkov wrote: >> On Wed, Dec 28, 2016 at 5:18 AM, Robert Moskowitz >> wrote: >>> Which is why I wonder if there is some different config for the C7.3 >>> version >>> of apache. >>> >>> Or something with the C7-arm build... >> Can you check fo

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Robert Moskowitz
On 12/28/2016 05:11 AM, Todor Petkov wrote: On Wed, Dec 28, 2016 at 5:18 AM, Robert Moskowitz wrote: Which is why I wonder if there is some different config for the C7.3 version of apache. Or something with the C7-arm build... Can you check for SELinux warnings/errors in /var/log/audit/audi

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Robert Moskowitz
On 12/28/2016 09:26 AM, Louis Lagendijk wrote: On Wed, 2016-12-28 at 08:20 -0500, Robert Moskowitz wrote: On 12/28/2016 07:35 AM, Louis Lagendijk wrote: Robert, On Wed, 2016-12-28 at 01:43 +0100, John Fawcett wrote: On 12/28/2016 01:12 AM, Robert Moskowitz wrote: On 12/27/2016 07:06 PM, Joh

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Louis Lagendijk
On Wed, 2016-12-28 at 08:20 -0500, Robert Moskowitz wrote: > > On 12/28/2016 07:35 AM, Louis Lagendijk wrote: > > Robert, > > On Wed, 2016-12-28 at 01:43 +0100, John Fawcett wrote: > > > On 12/28/2016 01:12 AM, Robert Moskowitz wrote: > > > > > > > > On 12/27/2016 07:06 PM, John Fawcett wrote: >

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Robert Moskowitz
On 12/28/2016 07:35 AM, Louis Lagendijk wrote: Robert, On Wed, 2016-12-28 at 01:43 +0100, John Fawcett wrote: On 12/28/2016 01:12 AM, Robert Moskowitz wrote: On 12/27/2016 07:06 PM, John Fawcett wrote: On 12/28/2016 12:34 AM, Robert Moskowitz wrote: On 12/27/2016 05:44 PM, John Fawcett wro

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Louis Lagendijk
Robert, On Wed, 2016-12-28 at 01:43 +0100, John Fawcett wrote: > On 12/28/2016 01:12 AM, Robert Moskowitz wrote: > > > > > > On 12/27/2016 07:06 PM, John Fawcett wrote: > > > On 12/28/2016 12:34 AM, Robert Moskowitz wrote: > > > > > > > > On 12/27/2016 05:44 PM, John Fawcett wrote: > > > > > Tha

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread John Fawcett
On 12/28/2016 04:16 AM, Robert Moskowitz wrote: > > > On 12/27/2016 08:20 PM, John Fawcett wrote: >> On 12/28/2016 01:43 AM, John Fawcett wrote: >>> On 12/28/2016 01:12 AM, Robert Moskowitz wrote: On 12/27/2016 07:06 PM, John Fawcett wrote: > On 12/28/2016 12:34 AM, Robert Moskowitz wrote:

Re: [CentOS] Help with httpd userdir recovery

2016-12-28 Thread Todor Petkov
On Wed, Dec 28, 2016 at 5:18 AM, Robert Moskowitz wrote: > > Which is why I wonder if there is some different config for the C7.3 version > of apache. > > Or something with the C7-arm build... Can you check for SELinux warnings/errors in /var/log/audit/audit.log? Regards, ___

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread Robert Moskowitz
On 12/27/2016 07:43 PM, John Fawcett wrote: On 12/28/2016 01:12 AM, Robert Moskowitz wrote: On 12/27/2016 07:06 PM, John Fawcett wrote: On 12/28/2016 12:34 AM, Robert Moskowitz wrote: On 12/27/2016 05:44 PM, John Fawcett wrote: That error should be caused by having MultiViews options but i

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread Robert Moskowitz
On 12/27/2016 08:20 PM, John Fawcett wrote: On 12/28/2016 01:43 AM, John Fawcett wrote: On 12/28/2016 01:12 AM, Robert Moskowitz wrote: On 12/27/2016 07:06 PM, John Fawcett wrote: On 12/28/2016 12:34 AM, Robert Moskowitz wrote: On 12/27/2016 05:44 PM, John Fawcett wrote: That error should

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread John Fawcett
On 12/28/2016 01:43 AM, John Fawcett wrote: > On 12/28/2016 01:12 AM, Robert Moskowitz wrote: >> >> On 12/27/2016 07:06 PM, John Fawcett wrote: >>> On 12/28/2016 12:34 AM, Robert Moskowitz wrote: On 12/27/2016 05:44 PM, John Fawcett wrote: > That error should be caused by having MultiViews

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread John Fawcett
On 12/28/2016 01:12 AM, Robert Moskowitz wrote: > > > On 12/27/2016 07:06 PM, John Fawcett wrote: >> On 12/28/2016 12:34 AM, Robert Moskowitz wrote: >>> >>> On 12/27/2016 05:44 PM, John Fawcett wrote: That error should be caused by having MultiViews options but incorrect permissions (711

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread Robert Moskowitz
On 12/27/2016 07:06 PM, John Fawcett wrote: On 12/28/2016 12:34 AM, Robert Moskowitz wrote: On 12/27/2016 05:44 PM, John Fawcett wrote: That error should be caused by having MultiViews options but incorrect permissions (711 instead of 755) on the directory. I just did chmod -R 755 /home/rgm

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread John Fawcett
On 12/28/2016 12:34 AM, Robert Moskowitz wrote: > > > On 12/27/2016 05:44 PM, John Fawcett wrote: >> That error should be caused by having MultiViews options but incorrect >> permissions (711 instead of 755) on the directory. > > I just did chmod -R 755 /home/rgm/public_html and no change in behavi

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread Robert Moskowitz
On 12/27/2016 05:44 PM, John Fawcett wrote: On 12/27/2016 11:02 PM, Robert Moskowitz wrote: On 12/27/2016 02:58 PM, Leonard den Ottolander wrote: Hello Robert, On Tue, 2016-12-27 at 12:43 -0500, Robert Moskowitz wrote: My understanding (most likely flawed) is that Indexes are needed to see

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread John Fawcett
On 12/27/2016 11:02 PM, Robert Moskowitz wrote: > > > On 12/27/2016 02:58 PM, Leonard den Ottolander wrote: >> Hello Robert, >> >> On Tue, 2016-12-27 at 12:43 -0500, Robert Moskowitz wrote: >>> My understanding (most likely flawed) is that Indexes are needed to see >>> the list of files in mydir, >

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread Robert Moskowitz
On 12/27/2016 02:58 PM, Leonard den Ottolander wrote: Hello Robert, On Tue, 2016-12-27 at 12:43 -0500, Robert Moskowitz wrote: My understanding (most likely flawed) is that Indexes are needed to see the list of files in mydir, Correct. and to be able to walk down to subdir. Incorrect. T

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread Leonard den Ottolander
Hello Robert, On Tue, 2016-12-27 at 12:43 -0500, Robert Moskowitz wrote: > My understanding (most likely flawed) is that Indexes are needed to see > the list of files in mydir, Correct. > and to be able to walk down to subdir. Incorrect. The index is a convenience. Without it directories with

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread Robert Moskowitz
On 12/27/2016 02:19 PM, John Fawcett wrote: On 12/27/2016 06:43 PM, Robert Moskowitz wrote: the owner is rgm:rgm, but the permissions is 755, not 711. So still scratching my head here.. is the error message you mention displayed in the browser? Have you looked into the logging produced by th

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread John Fawcett
On 12/27/2016 06:43 PM, Robert Moskowitz wrote: > > the owner is rgm:rgm, but the permissions is 755, not 711. > > So still scratching my head here.. is the error message you mention displayed in the browser? Have you looked into the logging produced by the web server itself? John _

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread Robert Moskowitz
On 12/27/2016 11:48 AM, Leonard den Ottolander wrote: Hello Robert, On Tue, 2016-12-27 at 10:25 -0500, Robert Moskowitz wrote: I can display the /home/rgm/public_html/index.html file that only has "Hello World' in it (to prevent anyone from walking my file tree from the root). To prevent peo

Re: [CentOS] Help with httpd userdir recovery

2016-12-27 Thread Leonard den Ottolander
Hello Robert, On Tue, 2016-12-27 at 10:25 -0500, Robert Moskowitz wrote: > I can display the /home/rgm/public_html/index.html file that only has > "Hello World' in it (to prevent anyone from walking my file tree from > the root). To prevent people walking a directory structure you better disabl

[CentOS] Help with httpd userdir recovery

2016-12-27 Thread Robert Moskowitz
I lost my harddrive on my little personal webserver that only serves some private files from my userdir. So I am trying to build this from notes on a new Centos7.3 installation (well really Centos7.3-arm, but supposedly same sources). Right now the server is running on a test subnet, not the