DISKWARN blocs Mount Point /var/tmp » and ModSecurity

mickael

Member
Aug 3, 2014
16
2
3
cPanel Access Level
Root Administrator
Hello

I received this email alert:

DISKWARN blocks : Mount Point "/ var / tmp"


In fact I have this problem every time I start "Modsecurity" (WHM> Plugins> ConfigServer ModSecurity Control - cmc v3.02 On


How to solve? Why does he create full files in / tmp and are never deleted? !!

Salutations
 
Last edited by a moderator:

Jcats

Well-Known Member
PartnerNOC
May 25, 2011
797
152
168
New Jersey
cPanel Access Level
DataCenter Provider
ConfigServer Firewall isn't a cPanel product so you are posting on the wrong forums: ConfigServer Community Forum - Index page

If you can provide some info about what's in /tmp that would help us to help you.

Code:
df /tmp
df -h /tmp
du -sch .[!.]* /tmp/ |sort -h
 
  • Like
Reactions: cPanelLauren

mickael

Member
Aug 3, 2014
16
2
3
cPanel Access Level
Root Administrator
jcats :

The contents are always the same, for example:

20190929-164834-XZDEQvVm4BVDTJKP-ghNEwAAABE-file-3LUIA0
There has already been about 50 since 16:45, because around 4:45 pm I typed this:

992 2019-09-29 16:46:37 du -sh /var/tmp
993 2019-09-29 16:46:43 cd /var/tmp
994 2019-09-29 16:46:54 rm -rf 20190924*
995 2019-09-29 16:47:01 rm -rf 20190925*
996 2019-09-29 16:47:05 rm -rf 20190926*
997 2019-09-29 16:47:08 rm -rf 20190927*
998 2019-09-29 16:47:14 rm -rf 20190928*
999 2019-09-29 16:47:18 rm -rf 20190929*
1000 2019-09-29 16:47:21 du -sh /var/tmp
 

cPanelLauren

Forums Analyst II
Staff member
Nov 14, 2017
8,421
689
263
Houston
cPanel Access Level
DataCenter Provider
Regardless, the issue is specifically with that 3rd party vendor and while we can try and assist you to a point, when it comes to issues with the way the 3rd party software functions we're limited in our ability to assist you. I'd suggest either disabling it until they offer an update or contact their support directly ConfigServer Services - Support Portal