CentOS 7.1 - Apache 2.4.6
Default configuration contains the following:
.... <Directory /> AllowOverride none Require all denied </Directory> ... DocumentRoot "/var/www/html"
If I change the DocumentRoot, I get:
403 - You don't have permission to access / on this server.
After hours of quadruple checking Directory configuration and filesystem permissions, I tried removing the block above... SUCCESS! Everything works.
- Is this supposed to happen?
- Am I doing something wrong?
- What are the security implications?
The entirety of my changes are replacing the default section with:
DocumentRoot "/srv/http" <Directory "/srv/http"> Options Indexes FollowSymLinks AllowOverride None Order allow,deny allow from all </Directory>