Red Hat System Administration II

Use the ssh command to log in to servera as the student user. The systems are configured to use SSH keys for authentication, so a password is not required.

[student@workstation ~]$ ssh student@servera
...output omitted...
[student@servera ~]$ 

Use the sudo -i command to switch to the root user. The password for the student user is student.

[student@servera ~]$ sudo -i
[sudo] password for student: student
[root@servera ~]# 

Configure Apache to use a document root in a non-standard location.

1. Create the new document root, /custom using the mkdir command.

   [root@servera ~]# mkdir /custom

2. Create the index.html file in the /custom document root using the echo command.

   [root@servera ~]# echo 'This is SERVERA.' > /custom/index.html

3. Configure Apache to use the new document root location. To do so, edit the Apache /etc/httpd/conf/httpd.conf configuration file and replace the two occurrences of /var/www/html with /custom.

   ...output omitted...
   DocumentRoot "/custom"
   ...output omitted...
   <Directory "/custom">
   ...output omitted...

Start and enable the Apache web service and confirm that the service is running.

1. Start and enable the Apache web service using the systemctl command.

   [root@servera ~]# systemctl enable --now httpd

2. Use the systemctl command to confirm that the service is running.

   [root@servera ~]# systemctl status httpd
   ● httpd.service - The Apache HTTP Server
      Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disabled)
      Active: active (running) since Mon 2019-03-25 19:16:48 CET; 15h ago
        Docs: man:httpd.service(8)
    Main PID: 6565 (httpd)
      Status: "Total requests: 16; Idle/Busy workers 100/0;Requests/sec: 0.000285; Bytes served/sec:   0 B/sec"
      Tasks: 213 (limit: 11406)
      Memory: 37.3M
      CGroup: /system.slice/httpd.service
              ├─6565 /usr/sbin/httpd -DFOREGROUND
              ├─6566 /usr/sbin/httpd -DFOREGROUND
              ├─6567 /usr/sbin/httpd -DFOREGROUND
              ├─6568 /usr/sbin/httpd -DFOREGROUND
              └─6569 /usr/sbin/httpd -DFOREGROUND
   
   Mar 25 19:16:48 servera.lab.example.com systemd[1]: Starting The Apache HTTP Server...
   Mar 25 19:16:48 servera.lab.example.com httpd[6565]: Server configured, listening on: port 80
   Mar 25 19:16:48 servera.lab.example.com systemd[1]: Started The Apache HTTP Server.

Open a web browser on workstation and try to view http://servera/index.html. You will get an error message that says you do not have permission to access the file.

To permit access to the index.html file on servera, SELinux must be configured. Define an SELinux file context rule that sets the context type to httpd_sys_content_t for the /custom directory and all the files below it.

[root@servera ~]# semanage fcontext -a \
-t httpd_sys_content_t '/custom(/.*)?'

Use the restorecon command to change the file contexts.

[root@servera ~]# restorecon -Rv /custom
Relabeled /custom from unconfined_u:object_r:default_t:s0 to unconfined_u:object_r:httpd_sys_content_t:s0
Relabeled /custom/index.html from unconfined_u:object_r:default_t:s0 to unconfined_u:object_r:httpd_sys_content_t:s0

Try to view http://servera/index.html again. You should see the message This is SERVERA. displayed.

Exit from servera.

[root@servera ~]# exit
logout
[student@servera ~]$ exit
logout
Connection to servera closed.
[student@workstation ~]$