title: Access denied (403) for PHP files with Nginx + PHP-FPM
body: <p>I have been spending few hours on that issue and despite the high number of posts related to it, I cannot solve it. I have a Fedora 20 box with Nginx + PHP-FPM that worked quite good until today (after I reloaded php-fpm.service I guess). Nginx is serving static files with no problem, but any PHP file triggers an error 403.</p>
  
  <p>The permissions are ok, nginx and php-fpm are running under the user "nginx":</p>
  
  <pre><code>root     13763  0.0  0.6 490428 24924 ?        Ss   15:47   0:00 php-fpm: master process (/etc/php-fpm.conf)
  nginx    13764  0.0  0.1 490428  7296 ?        S    15:47   0:00 php-fpm: pool www
  nginx    13765  0.0  0.1 490428  7296 ?        S    15:47   0:00 php-fpm: pool www
  nginx    13766  0.0  0.1 490428  7296 ?        S    15:47   0:00 php-fpm: pool www
  nginx    13767  0.0  0.1 490428  7296 ?        S    15:47   0:00 php-fpm: pool www
  nginx    13768  0.0  0.1 490428  6848 ?        S    15:47   0:00 php-fpm: pool www
  </code></pre>
  
  <p>The served files have been set to nginx user as well, I even ended chmoding 777 those files to try, but still "Access denied" for any PHP files.</p>
  
  <p>Below is a server of my Nginx config:</p>
  
  <pre><code>server {
          listen          80;
          server_name     localhost;
  
          root            /var/www/html;
  
           location ~ \.php$ {
              fastcgi_intercept_errors on;
              try_files $uri =404;
              fastcgi_pass   127.0.0.1:9000;
              fastcgi_index  index.php;
              fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
              include        fastcgi_params;
          }
  }
  </code></pre>
  
  <p>The PHP-FPM pool:</p>
  
  <pre><code>[www]
  ...
  listen = 127.0.0.1:9000
  user = nginx
  group = nginx
  ...
  </code></pre>
  
  <p>For the versions:</p>
  
  <p><strong>php-5.5.11</strong> (as well as <strong>php-fpm-5.5.11</strong> of course)</p>
  
  <p><strong>nginx-1.4.7</strong></p>
  
  <p>I am adding the Nginx error log:</p>
  
  <pre><code> FastCGI sent in stderr: "Access to the script '/var/www/html' has been denied (see security.limit_extensions)" while reading response header from upstream, client: xxx.xxx.xxx.xxx, server: localhost, request: "GET /index.php HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "xxx.xxx.xxx.xxx"
  </code></pre>
  
  <p>And precise that <code>security.limit_extensions</code> is correct, set to: <code>security.limit_extensions = .php</code>.</p>
  
  <p>About the path permissions, <strong>/var/www/html</strong> can be traversed.
  What am I missing?</p>