So, this error is a bit weird. First, just to be clear, "/var/cpanel/secdatadir/ip" is not a file. So, if you go looking for it, you will not find it. There is a directory "/var/cpanel/secdatadir/"ModSecurity: collection_store: Failed to access DBM file "/var/cpanel/secdatadir/ip": Permission denied
The solution appears to be to remove mod_ruid2 or disable every IP rule in mod_security.
An alternate solution is to make a fix with the permissions. secdatadir needs to be some place that apache (nobody) had execute to, so it can see the directory.
I created /home/secdatadir and chowned it to nobody:nobody. Then I chmoded the files that were created in there to 777. I udpated mod_security to:
##SecDataDir "/var/cpanel/secdatadir" SecDataDir "/home/secdatadir"
Not happy about the 777 files, but at least the log and IP scanning is working again.
Last edited by a moderator: