[users@httpd] mod_security

[benkevich_a <an...@aprec.ru>]

Hi, sorry, but i haven't found mod_security mailing list.
So I spamming this list...:-)

Tell me please what does it mean:
[Mon Oct 18 16:26:24 2004] [notice] suEXEC mechanism enabled (wrapper: /usr/local/apache2/bin/suexec)
[Mon Oct 18 16:26:25 2004] [notice] mod_security: chroot checkpoint #1 (pid=65088 ppid=65087)
[Mon Oct 18 16:26:25 2004] [notice] Digest: generating secret for digest authentication ...
[Mon Oct 18 16:26:25 2004] [notice] Digest: done
[Mon Oct 18 16:26:26 2004] [notice] mod_security: chroot checkpoint #2 (pid=65098 ppid=1)
[Mon Oct 18 16:26:26 2004] [notice] mod_security: chroot successful, path=/usr/local/apache2/
[Mon Oct 18 16:26:26 2004] [error] (2)No such file or directory: could not create /usr/local/apache2/logs/httpd.pid
[Mon Oct 18 16:26:26 2004] [error] httpd: could not log pid to file /usr/local/apache2/logs/httpd.pid

mod_security is DSO module in my Apache's 2.x config...
I started it at last(two first lines in config):

SecFilterEngine On
SecChrootDir "/usr/local/apache2/"

And apache does not started after it!

Please help me

Best regards,
Anton



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] mod_security

[Nick Kew <ni...@webthing.com>]

On Mon, 18 Oct 2004, benkevich_a wrote:

> Hi, sorry, but i haven't found mod_security mailing list.
> So I spamming this list...:-)

I'm not sure if Ivan listens here; if so he can tell you more ...

> [Mon Oct 18 16:26:26 2004] [notice] mod_security: chroot successful, path=/usr/local/apache2/

OK, you chrooted

> [Mon Oct 18 16:26:26 2004] [error] (2)No such file or directory: could not create /usr/local/apache2/logs/httpd.pid

That path is not valid in your chroot jail.

If you're going to use chroot, you need to understand exactly what it
does.  That's rather harder than most of the tasks you have to do these
days.  Read the manual, and try it (chroot /usr/local/apache2 from a
shell).  You'll see the system looks very different from inside the jail;
you need to make sure what you need is available there, and you need to
fix the paths.

-- 
Nick Kew

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org