[Modsecurity] permissions error

Gerard Earley gerard at whitecurve.com
Wed Sep 13 06:12:58 EDT 2006


The permissions on my Webserver got a little messed up and modsecurity is
now not logging.

The following is a typical error:

[Wed Sep 13 10:21:59 2006] [error] [client xx.xx.xx.xx] mod_security: Access
denied with code 500. Pattern match "!^127\\\\.0\\\\.0\\\\.1$" at
REMOTE_ADDR [severity "EMERGENCY"] [hostname "www.DOMAINNAME.com"] [uri
"/server-info/"] [unique_id "Urg at ctmgTNIAACDdX7kAAAAH"]
[Wed Sep 13 10:21:59 2006] [error] [client xx.xx.xx.xx] mod_security: Audit
log: Failed to create subdirectories:
/var/log/httpd/audit_logs/20060913/20060913-1021 (Permission denied)
[hostname "www.DOMAINNAME.com"] [uri "/server-info/"] [unique_id
"Urg at ctmgTNIAACDdX7kAAAAH"]

I thought I'd reset the permission by running the following 

#this resets all individual reports files in one go
chmod -R 640 /var/log/httpd/audit_logs/20060*

#then set the permissions of the day and minute folders
chmod 750 /var/log/httpd/audit_logs/20060*
chmod 750 /var/log/httpd/audit_logs/20060*/*

#then set permission for the audit log
chmod 777 /var/log/httpd/audit_logs/audit_log*

Can anyone give me a pointer on what else could be wrong?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4491 bytes
Desc: not available
Url : http://lists.gotroot.com/pipermail/modsecurity/attachments/20060913/a5233b39/attachment.bin 


More information about the Modsecurity mailing list