{"id":1865,"date":"2019-01-22T15:55:09","date_gmt":"2019-01-22T06:55:09","guid":{"rendered":"https:\/\/cent-niship\/mput\/?page_id=1865"},"modified":"2019-01-22T15:55:09","modified_gmt":"2019-01-22T06:55:09","slug":"403forbiddn","status":"publish","type":"page","link":"https:\/\/east19-mikas.com\/mpat\/?page_id=1865","title":{"rendered":"403Forbiddn"},"content":{"rendered":"\n

Apache\u3067403 Forbidden\u304c\u8868\u793a\u3055\u308c\u305f\u3089<\/strong><\/p>\n\n\n\n

\u74b0\u5883<\/h2>\n\n\n\n

\u30fbCentOS Linux release 7.1.1503 (Core)
\u30fbApache 2.4.6<\/p>\n\n\n\n

\u524d\u63d0<\/h2>\n\n\n\n

\u30fb\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb
\u3000\/etc\/httpd\/conf\/httpd.conf
\u30fbDocumentRoot
\u3000\/var\/www\/html
\u30fb\u30c6\u30b9\u30c8\u30da\u30fc\u30b8
\u3000\/var\/www\/html\/index.html<\/p>\n\n\n\n

\u4e8b\u8c61<\/h2>\n\n\n\n

\u30c6\u30b9\u30c8\u30da\u30fc\u30b8\u3092\u8868\u793a\u3057\u3088\u3046\u3068\u3059\u308b\u3068403 Forbidden\u304c\u8868\u793a\u3055\u308c\u308b\u3002<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

\u30c1\u30a7\u30c3\u30af\u30dd\u30a4\u30f3\u30c8<\/h2>\n\n\n\n

Apache\u306e\u518d\u8d77\u52d5\u3092\u3057\u3066\u3044\u306a\u3044<\/h3>\n\n\n\n

\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u5909\u66f4\u3057\u305f\u5834\u5408\u3001Apache\u3092\u518d\u8d77\u52d5\u3057\u306a\u3044\u3068\u5909\u66f4\u304c\u53cd\u6620\u3055\u308c\u307e\u305b\u3093\u3002
\u305d\u306e\u305f\u3081\u518d\u8d77\u52d5\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u306f\u3001\u5b9f\u65bd\u3057\u307e\u3059\u3002<\/p>\n\n\n\n

\u518d\u8d77\u52d5<\/h3>\n\n\n\n
$ sudo systemctl restart httpd.service<\/mark><\/pre>\n\n\n\n
\u30ea\u30ed\u30fc\u30c9<\/h3>\n\n\n\n
Apache\u3092\u7d42\u4e86\u3057\u305f\u304f\u306a\u3044\u5834\u5408\u306f\u3001\u4ee5\u4e0b\u3092\u5b9f\u884c\u3057\u3066\u4e0b\u3055\u3044\u3002<\/p>\n\n\n\n
$ sudo systemctl reload httpd.service<\/mark><\/pre>\n\n\n\n
\u30d5\u30a1\u30a4\u30eb\u306b\u8aad\u307f\u53d6\u308a\u6a29\u9650\u304c\u306a\u3044<\/h3>\n\n\n\n
\u6a29\u9650\u306b\u306f\u300c\u6240\u6709\u8005\u300d\u300c\u6240\u6709\u30b0\u30eb\u30fc\u30d7\u300d\u300c\u305d\u306e\u4ed6\u306e\u30e6\u30fc\u30b6\u300d\u304c\u3042\u308a\u307e\u3059\u304c\u3001\u300c\u305d\u306e\u4ed6\u306e\u30e6\u30fc\u30b6\u300d\u306b\u8aad\u307f\u53d6\u308a\u6a29\uff08r\uff09\u304c\u4ed8\u4e0e\u3055\u308c\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002
\u203b\u4eca\u56de\u306e\u5834\u5408\u3060\u3068\u3001\/var\/hoge\/index.html \u306e\u6a29\u9650\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n\n\n\n
\u305d\u306e\u4ed6\u306e\u30e6\u30fc\u30b6\u306b\u8aad\u307f\u53d6\u308a\u6a29\u304c\u306a\u3044\u5834\u5408<\/h3>\n\n\n\n
$ ls -l \/var\/hoge\/index.html<\/mark>\n  -rw-r----- 1 root root 19 11\u6708 26 11:21 \/var\/hoge\/index.html<\/span><\/pre>\n\n\n\n
\u5bfe\u5fdc<\/h3>\n\n\n\n
\u30d5\u30a1\u30a4\u30eb\u306b\u8aad\u307f\u53d6\u308a\u6a29\u3092\u4ed8\u4e0e\u3057\u307e\u3059\u3002<\/p>\n\n\n\n
$ sudo chmod +r \/var\/hoge\/index.html<\/mark>\n$ ls -l \/var\/hoge\/index.html<\/mark>\n  -rw-r--r-- 1 root root 19 11\u6708 26 11:21 \/var\/hoge\/index.html<\/span><\/pre>\n\n\n\n
\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u6a29\u9650\u306b\u5b9f\u884c\u6a29\u304c\u306a\u3044<\/h3>\n\n\n\n
DocumentRoot\u307e\u3067\u306e\u5404\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3067\u3001\u300c\u305d\u306e\u4ed6\u306e\u30e6\u30fc\u30b6\u300d\u306b\u5b9f\u884c\u6a29\uff08x\uff09\u304c\u4ed8\u4e0e\u3055\u308c\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002
\u4eca\u56de\u3060\u3068\u300c\/\u300d, \u300c\/var\u300d, \u300c\/var\/hoge\u300d\u306e3\u3064\u306e\u5185\u306e\u3044\u305a\u308c\u304b\u306b\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u5b9f\u884c\u6a29\uff08x\uff09\u304c\u306a\u3044\u3068\u3001\u30c6\u30b9\u30c8\u30da\u30fc\u30b8\u304c\u8868\u793a\u3055\u308c\u307e\u305b\u3093\u3002<\/p>\n\n\n\n
\/var\/hoge\/ \u306b\u5b9f\u884c\u6a29\u304c\u306a\u3044\u5834\u5408<\/h3>\n\n\n\n
  $ ls -ld \/var\/hoge\/<\/mark>\n  drwxr-xr-- 2 root root 23 11\u6708 26 20:22 \/var\/hoge\/<\/pre>\n\n\n\n
\u5bfe\u5fdc<\/h3>\n\n\n\n
\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u5b9f\u884c\u6a29\u3092\u4ed8\u4e0e\u3059\u308b\u3002<\/p>\n\n\n\n
$ sudo chmod o+x \/var\/hoge<\/mark>\n\n$ ls -ld \/var\/hoge<\/mark>\ndrwxr-xr-x 2 root root 23 11\u6708 26 20:22 \/var\/hoge\/\n<\/pre>\n\n\n\n
httpd.conf\u306eDirectory\u30bb\u30af\u30b7\u30e7\u30f3\u306e\u8a2d\u5b9a\u3092\u898b\u76f4\u3059<\/h3>\n\n\n\n
Directory\u30bb\u30af\u30b7\u30e7\u30f3\u5185\u306eRequire\u306e\u8a2d\u5b9a\u3092\u78ba\u8a8d\u3057\u307e\u3057\u3087\u3046\u3002<\/p>\n\n\n\n
\u3059\u3079\u3066\u306e\u30a2\u30af\u30bb\u30b9\u3092\u62d2\u5426\u3059\u308b\u5834\u5408<\/h3>\n\n\n\n
  $ cat \/etc\/httpd\/conf\/httpd.conf<\/mark>\n \n   <Directory\"\/var\/hoge\">\n        Options Indexes FollowSymLinks\n         AllowOverride None\n         Require all denied    \u2190\u5168\u3066\u306e\u30a2\u30af\u30bb\u30b9\u3092\u62d2\u5426\n   <\/pre>\n\n\n\n
\u4e0a\u8a18\u306e\u3088\u3046\u306bRequire\u3067\u300call denied\u300d\u3068\u8a18\u8ff0\u3059\u308b\u3068\u3001\u3069\u3053\u304b\u3089\u3067\u3082\u30a2\u30af\u30bb\u30b9\u4e0d\u53ef\u3068\u306a\u3063\u3066\u3057\u307e\u3044\u30c6\u30b9\u30c8\u30da\u30fc\u30b8\u304c\u8868\u793a\u3055\u308c\u307e\u305b\u3093\u3002
\u305d\u306e\u305f\u3081\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u65b9\u6cd5\u3067\u30c6\u30b9\u30c8\u30da\u30fc\u30b8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n
\u3059\u3079\u3066\u306e\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3059\u308b\u5834\u5408<\/h3>\n\n\n\n
...\n   <Directory\"\/var\/hoge\">\n       Options Indexes FollowSymLinks\n        AllowOverride None\n        Require all granted    \u2190\u5168\u3066\u306e\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\n   \n...<\/pre>\n\n\n\n
\u7279\u5b9a\u306eIP\u306e\u307f\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3059\u308b\u5834\u5408<\/h3>\n\n\n\n
...\n   <Directory\"\/var\/hoge\">\n       Options Indexes FollowSymLinks\n        AllowOverride None\n        Require192.168.1.0\/24    \u2190\u6307\u5b9a\u3057\u305fIP\u304b\u3089\u306e\u307f\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\n   \n...<\/pre>\n\n\n\n
SELinux\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b<\/h3>\n\n\n\n
SELinux\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u5834\u5408\u3001DocumentRoot\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u62d2\u5426\u3055\u308c\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002
SELinux\u3092\u5229\u7528\u3059\u308b\u4e88\u5b9a\u304c\u306a\u3044\u5834\u5408\u306f\u7121\u52b9\u306b\u8a2d\u5b9a\u3057\u307e\u3057\u3087\u3046\u3002<\/p>\n\n\n\n
SELinux\u3092\u7121\u52b9\u306b\u3059\u308b\u5834\u5408<\/h3>\n\n\n\n
SELinux\u306e\u72b6\u614b\u78ba\u8a8d<\/h3>\n\n\n\n
  $ getenforce<\/mark>\n  Enforcing\n<\/pre>\n\n\n\n
Enforcing\u3068\u8868\u793a\u3055\u308c\u308b\u5834\u5408\u3001SELinux\u306f\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u72b6\u614b\u3067\u3059\u3002<\/p>\n\n\n\n
SELinux\u3092\u7121\u52b9\u306b\u3059\u308b<\/h3>\n\n\n\n
SELinux\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306f \/etc\/selinux\/config \u306b\u306a\u308b\u305f\u3081\u3001\u3053\u3061\u3089\u3092\u7de8\u96c6\u3057\u307e\u3059\u3002<\/p>\n\n\n\n
  $ sudo vi\/etc\/selinux\/config<\/mark>\n  ...\n  SELINUX=disabled     \u2190enforcing\u304b\u3089disabled\u306b\u5909\u66f4\n  ...\n<\/pre>\n\n\n\n
\u30b5\u30fc\u30d0\u518d\u8d77\u52d5<\/h3>\n\n\n\n
SELinux\u306e\u8a2d\u5b9a\u3092\u53cd\u6620\u3059\u308b\u305f\u3081\u306b\u30b5\u30fc\u30d0\u306e\u518d\u8d77\u52d5\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n\n\n\n
  $ sudo shutdown -r now<\/mark>\n<\/pre>\n\n\n\n
SELinux\u306e\u72b6\u614b\u3092\u518d\u5ea6\u78ba\u8a8d<\/h3>\n\n\n\n
  $ getenforce<\/mark>\n  Disabled\n<\/pre>\n\n\n\n
Disabled\u3068\u8868\u793a\u3055\u308c\u308c\u3070\u3001SELinux\u306f\u7121\u52b9\u306b\u5909\u66f4\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n
SELinux\u3092\u6709\u52b9\u306e\u307e\u307e\u904b\u7528\u3059\u308b\u5834\u5408<\/h3>\n\n\n\n
\u65b0\u3057\u3044DocumentRoot\u306b\u306fSELinux\u306e\u30e9\u30d9\u30eb\u3092\u4ed8\u3051\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n
\u5143DocumentRoot\u306e\u30e9\u30d9\u30eb\u3092\u78ba\u8a8d<\/h3>\n\n\n\n
  $ ls -ld --context \/var\/www\/html<\/mark>\n  drwxr-xr-x. root root system_u:object_r:httpd_sys_rw_content_t:s0 \/var\/www\/html\n<\/pre>\n\n\n\n
\u30e9\u30d9\u30eb\u306e\u4ed8\u4e0e<\/h3>\n\n\n\n
\u65b0DocumentRoot\u306b\u5143DocumentRoot\u3068\u540c\u3058\u30e9\u30d9\u30eb\u3092\u4ed8\u4e0e\u3057\u307e\u3059\u3002<\/p>\n\n\n\n
  $ sudo chcon system_u:object_r:httpd_sys_rw_content_t:s0 \/var\/hoge -R<\/mark>\n<\/pre>\n\n\n\n
\u30e9\u30d9\u30eb\u306e\u78ba\u8a8d<\/h3>\n\n\n\n
\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u8868\u793a\u3055\u308c\u3066\u3044\u308c\u3070\u3001\u5143DocumentRoot\u3068\u540c\u3058\u30e9\u30d9\u30eb\u304c\u4ed8\u4e0e\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n
  $ ls -ld --context \/var\/hoge<\/mark>\n  drwxr-xr-x. root root system_u:object_r:httpd_sys_rw_content_t:s0 \/var\/hoge\n<\/pre>\n\n\n\n
\u53c2\u8003\u30b5\u30a4\u30c8\uff1ahttps:\/\/engineers.weddingpark.co.jp\/?p=1031<\/p>\n","protected":false},"excerpt":{"rendered":"
Apache\u3067403 Forbidden\u304c\u8868\u793a\u3055\u308c\u305f\u3089 \u74b0\u5883 \u30fbCentOS Linux release 7.1.1503 (Core)\u30fbApache 2.4.6 \u524d\u63d0 \u30fb\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3000\/etc\/httpd\/conf\/h […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":1830,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-1865","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/east19-mikas.com\/mpat\/index.php?rest_route=\/wp\/v2\/pages\/1865","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/east19-mikas.com\/mpat\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/east19-mikas.com\/mpat\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/east19-mikas.com\/mpat\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/east19-mikas.com\/mpat\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1865"}],"version-history":[{"count":0,"href":"https:\/\/east19-mikas.com\/mpat\/index.php?rest_route=\/wp\/v2\/pages\/1865\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/east19-mikas.com\/mpat\/index.php?rest_route=\/wp\/v2\/pages\/1830"}],"wp:attachment":[{"href":"https:\/\/east19-mikas.com\/mpat\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1865"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}