mod_security problem in most recent update

[johnchan]

In the most recent update (rolled out today/yesterday) mod_security has stopped working properly:

=============================
/etc/cron.hourly/modsecparse.pl:

DBI connect('modsec:localhost','modsec',...) failed: Access denied for user 'modsec'@'localhost' (using password: NO) at /etc/cron.hourly/modsecparse.pl line 18
=============================

Every hour we're getting this now on 2 of our CPanel servers.

It was working smoothly before.

Anyone know about this or how to resolve this recent bug?

[xisn]

Seems we are getting this on several servers too...

[rpmws]

I have it now on all my boxes. I also get tar errors on /scripts/cpbackup

[nickp666]

according to another thread here a re-install should fix it

http://forums.cpanel.net/showthread....633#post223633

[PPNSteve]

we have this modsec error as well.. that 'fix' didn't work (got another error in mysql)


so now what?

edit: just removed and re-installed it.. works fine for now..

[nickp666]

has anyone added it to bugzilla? if not I will

[henker]

has anyone added it to bugzilla? if not I will

I must admit I haven't, but...
I uninstalled and reinstalled a couple of times via WHM until I noticed that the latest mod_security wasn't even in apache/libexec, so I had to manually apxs it and enable it manually in httpd.conf as cPanel set it up in the wrong order:


Include "/usr/local/apache/conf/modsec.conf"
AddModule mod_security.c

instead of
AddModule mod_security.c
Include "/usr/local/apache/conf/modsec.conf"

On another server, all instances of mod_security had a # at the beginning of the line,
so basically mod_security wasn't enabled at all...

Things like these should not go wrong.

[PPNSteve]

hmm.. went in fine, and correctly for my servers..

oh well meybe there is some bug in the latest update/version.

[chae]

I have it now on all my boxes. I also get tar errors on /scripts/cpbackup

I uninstalled/reinstalled and pasted in my ruleset again and all is well.

Have also noticed several tar errors with my backups.

[johnchan]

It seems like lots of people are having this problem.

How could this slip through into the RELEASE version? We're not running EDGE or CURRENT.

[henker]

STABLE in our case... But then again, modsecurity is marked "Beta"... Some of the Addon modules, eg. cpanelpro really make you think what "STABLE" means

[chirpy]

Indeed. It is BETA and as such you can expect problems.

[johnchan]

Uninstalling and reinstalling the module via the WHM interface solved this for us on our servers.

[mount]

It is not a problem from mod_security. Is of MySQL.

http://forums.cpanel.net/showthread.php?t=47194

[johnchan]

It is not a problem from mod_security. Is of MySQL.

http://forums.cpanel.net/showthread.php?t=47194

Thats a completely different problem of MySQL not running at all. Don't confuse mod_security problem... it is completely different.