Apache – One of the pdf files in the apache server can be accessed the other can’t, with the same permissions and same directory

apache-httpdpermissions

I have two pdf files in my server:

-rwxr-xr-x. 1 apache apache 1422861 Sep 11  2014 file1.pdf
-rwxr-xr-x. 1 apache apache  340815 Aug 27 13:06 file2.pdf

I can access the first one by going to www.myserver.com/pdffiles/file1.pdf

I just uploaded the second one and changed permissions to apache:apache and rwxr-xr-x so I wouldn't have problems with permissions, but when I try to access the second file with www.myserver.com/pdffiles/file2.pdf I get this:

Forbidden

You don't have permission to access
/pdffiles/file2.pdf on this
server.

What am I missing?

I got the following on my ssl_error_log:

[Thu Aug 27 13:30:46.755295 2015] [core:error] [pid 3025]
(13)Permission denied: [client x.x.x.x:60230] AH00132: file
permissions deny server access: /var/www/myserver/file2.pdf

Best Answer

I didn't know the problem was SELinux but I discovered that was the problem because I turned it off with setenforce 0 and then it worked. This is how it looked when I listed the files with ls -alZ

-rwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0 file1.pdf
-rwxr-xr-x. apache apache unconfined_u:object_r:user_home_t:s0 file2.pdf

so I fixed it with:

chcon unconfined_u:object_r:httpd_sys_rw_content_t:s0 file2.pdf

and also I turned SELinux back on with setenforce 1.

Related Solutions

Find Command – Find Directories and Files with Permissions Other Than 775 or 664

Use the -perm test to find in combination with -not:

find -type d -not -perm 775 -o -type f -not -perm 664

-perm 775 matches all files with permissions exactly equal to 775. -perm 664 does the same for 664.
-not (boolean NOT) negates the test that follows, so it matches exactly the opposite of what it would have: in this case, all those files that don't have the correct permissions.
-o (boolean OR) combines two sets of tests together, matching when either of them do: it has the lowest precedence, so it divides our tests into two distinct groups. You can also use parentheses to be more explicit. Here we match directories with permissions that are not 775 and ordinary files with permissions that are not 664.

If you wanted two separate commands for directories and files, just cut it in half at -o and use each half separately:

find -type f -not -perm 664
find -type d -not -perm 775

Best Answer

Related Solutions

Find Command – Find Directories and Files with Permissions Other Than 775 or 664

Related Question