This article briefly describes how to move virtual hosts outside the standard \/var\/www\/html directory in CentOS 6.x.\u00a0By default SELinux in CentOS does not allow the httpd process to access files outside the standard \/var\/www\/html directory.<\/p>\n
One side effect of not having the access permission is that\u00a0properly configured virtual hosts\u00a0resolve to the default directory without any errors in server’s log files. This\u00a0makes it difficult to troubleshoot without installing additional tools.<\/p>\n
SELinux is an access control implementation for the Linux kernel. The root user can define rules in user space. If the Linux kernel has been compiled with SELinux support, those rules will be adhered to by the kernel.<\/p>\n
With the following commands it is possible to check if the SELinux mechanism is actively enforcing the security rules:<\/p>\n
sestatus<\/b>\u00a0– shows\u00a0<\/i>the status of a system running SELinux<\/i><\/p>\n
The ls command provides means to display the security context:<\/p>\n
ls -dZ \/www\/directory-name<\/i><\/b><\/p>\n
For a typical directory the result will look similar to:<\/p>\n
unconfined_u:object_r: default_t :s0<\/i><\/b><\/p>\nGranting SELinux Access<\/h3>\n
In order to allow access we add the httpd security context:<\/p>\n
unconfined_u:object_r: httpd_sys_content_t :s0\u00a0<\/i><\/b><\/p>\n
chcon -t httpd_sys_content_t \/www\/test<\/i><\/b><\/p>\n
Normally all sub-directories will inherit the new context\u00a0automatically. For existing files keep in mind to apply the change recursively.<\/p>\n
For local development setup it is possible to disable the SELinux rule enforcement in the \/etc\/sysconfig\/selinux configuration file. For production environments disabling the access control is probably not recommended.<\/p>\n
Configuration File:\u00a0\/etc\/sysconfig\/selinux<\/b>
\n
\n<\/i><\/b># SELINUX= can take one of these three values:<\/i>
\n# enforcing – SELinux security policy is enforced.<\/i>
\n# permissive – SELinux prints warnings instead of enforcing.<\/i>
\n# disabled – SELinux is fully disabled.<\/i>
\nSELINUX=enforcing<\/i><\/b><\/p>\n","protected":false},"excerpt":{"rendered":"
This article briefly describes how to move virtual hosts outside the standard \/var\/www\/html directory in CentOS 6.x.\u00a0By default SELinux in CentOS does […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1647","post","type-post","status-publish","format-standard","hentry","category-info-on-tech"],"_links":{"self":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/1647","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1647"}],"version-history":[{"count":0,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/1647\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}