Home / server / Questions / 374883
In Process
Patt-tom McDonnell
Asked: 2012-03-29 06:40:12 +0800 CST

CentOS Apache HTTPD Configuration (403 Forbidden)

  • 772

This is what i have in my httpd.conf

<VirtualHost *:80>
        ServerAdmin [email protected]
        ServerName mcmoddr.com
        ServerAlias www.mcmoddr.com
        DocumentRoot /home/mcmoddr/www/
        ErrorLog /mcmoddr/logs/error.log
        CustomLog /mcmoddr/logs/accesslog combined
</VirtualHost>

When visiting thwe site i get a 403 Forbidden error, The files are added with vsftpd and have the permissions drwxr-xr-x

centos apache-2.2 httpd http-status-code-403

6 Answers

  1. You are using a stock install of CentOS, if that is correct please check that if SELinux is in Enforcing mode

    getenforce

    if the result is "Enforcing"

    temporally change it to permissive

    setenforce 0

    and try again, you can also guide the condition of web content to the files in your home directory.

    • 13

  2. Disable SELinux or run in ROOT

    setsebool -P httpd_enable_homedirs on
chcon -R -t httpd_sys_content_t /home/
chcon -R -t httpd_sys_rw_content_t /home/
    • 9

  3. Freaktor's answer of 'setenforce 0' did "work" for me (thanks!)

    But to keep it working and re-enable SELinux, I needed to

    sudo chcon -Rv --type=httpd_t /path/to/my/files

    ...this gave my directory and all files and directories within it the security context of "httpd_t" which is a clunky way of saying SELinux let httpd read those files.

    enabling selinux again was as simple as 

    setenforce 1
    • 5

  4. You probably have a deny all somewhere in the global config. Try adding this to the vhost stanza:

    <Directory /home/mcmoddr/www>
  Order allow,deny
  Allow from all
</Directory>
    • 3

  5. Please add the below line in your existing code.

    restorecon -r /home/mcmoddr/www/

    It should fix your issue.

    • 0

  6. you need to use the <Directory> container as it mentioned above .

    And then you need to check from your DocumentRoot path, Each directory must have read permission so the service user apache can access .

    you can check using ls -ld

    • 0