An SELinux-enforcing system denies a web server access after files were moved from a home directory into its normal content path. Standard ownership and modes are correct. What should be examined first?

1. Disabling SELinux permanently without reviewing the denial
2. SELinux audit denials and the files' security contexts
3. Deleting all audit logs
4. Making every file mode 777