Does cmc have to be removed if mod_sec is removed

These forums are not for questions about ModSecurity, just the cmc script itself
Post Reply
vicos
Junior Member
Posts: 16
Joined: 21 Dec 2008, 22:47

Does cmc have to be removed if mod_sec is removed

Post by vicos »

Howdy,

I just had to remove mod_security from my Apache build because of an incompatibility with Ruid2.

Is it best to remove cmc also, or am I OK leaving it installed?

I hope to use mod_sec one day when the issue is resolved.

TIA!
Sergio
Junior Member
Posts: 1685
Joined: 12 Dec 2006, 14:56

Re: Does cmc have to be removed if mod_sec is removed

Post by Sergio »

I have servers with ruid and modsec working together, what happens with yours?

What modsec rules did you use?
vicos
Junior Member
Posts: 16
Joined: 21 Dec 2008, 22:47

Re: Does cmc have to be removed if mod_sec is removed

Post by vicos »

It's a well documented clash between Ruid2 and mod_security. Something to do with file locking of log files.

The error is: Audit log: Failed to lock global mutex: Permission denied

They say it could lead to race conditions. But, another issue, is that you get the above error and can't see which rule was enacted, making it impossible to disable that rule if required.

This is a CPANEL server. They were supposed to fix it with the newest EasyApache, but something went wrong at the last minute.
Sergio
Junior Member
Posts: 1685
Joined: 12 Dec 2006, 14:56

Re: Does cmc have to be removed if mod_sec is removed

Post by Sergio »

What set of modsec rules are you using? GotRoot? OWASP?
Sergio
Junior Member
Posts: 1685
Joined: 12 Dec 2006, 14:56

Re: Does cmc have to be removed if mod_sec is removed

Post by Sergio »

Ok, I found the info on:
https://documentation.cpanel.net/displa ... odSecurity
strange as I haven't seen this error in my server.

Thanks for posting.

If you are using GotRoot, have you tried to contact Atomicorp about this issue?
vicos
Junior Member
Posts: 16
Joined: 21 Dec 2008, 22:47

Re: Does cmc have to be removed if mod_sec is removed

Post by vicos »

Is it best to remove cmc also, or am I OK leaving it installed?
Post Reply