Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Apache errors when using OWASP ModSecurity

Discussion in 'Security' started by tomdchi, Mar 7, 2015.

  1. tomdchi

    tomdchi Well-Known Member

    Joined:
    Feb 24, 2008
    Messages:
    133
    Likes Received:
    2
    Trophy Points:
    68
    Location:
    Atlanta, GA
    cPanel Access Level:
    DataCenter Provider
    I just upgraded to the latest WHM (11.48.1) and enabled the OWASP ModSecurity rule set. I am seeing these errors in the apache logs:

    Code:
    [Fri Mar 06 17:42:23 2015] [error] [client 204.17.62.24] ModSecurity: Audit log: Failed to create subdirectories: /usr/local/apache/logs/modsec_audit/apisure/20150306/20150306-1742 (Read-only file system)
    
    [Sat Mar 07 14:49:39 2015] [error] [client 72.236.170.26] ModSecurity: collection_store: Failed to access DBM file "/var/cpanel/secdatadir/ip": Permission denied
    
    [Sat Mar 07 14:49:39 2015] [error] [client 72.236.170.26] ModSecurity: Geo Lookup: Failed to lock proc mutex: Permission denied
    What can I do to fix these?
     
  2. cPanelPeter

    cPanelPeter Technical Analyst III
    Staff Member

    Joined:
    Sep 23, 2013
    Messages:
    575
    Likes Received:
    20
    Trophy Points:
    143
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    I'm guessing you have ModRuid2 enabled? If so documentation may help you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. keat63

    keat63 Well-Known Member

    Joined:
    Nov 20, 2014
    Messages:
    1,017
    Likes Received:
    45
    Trophy Points:
    28
    cPanel Access Level:
    Root Administrator
    I too also get these, and i'm using Ruid2.
    Ruid2 appears to be creating some errors with an OS Commerce site i'm toying with, so I'm considering temporarily removing Ruid2 this evening to see the outcome.

    I'm happy to report back here tomorrow if it helps.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice