Skip to main content

Mod Security rule changes in cPanel 64

Comments

4 comments

  • jndawson
    Update - We think it may be related to the mod_sec update:
    [Wed Mar 29 04:02:27.596068 2017] [:error] [pid 14535] [client 12.34.56.78] ModSecurity: Exec: Execution failed while reading output: /etc/cxs/cxscgi.sh (End of file found) [hostname "whmcs.tld"> [uri "/submitticket.php"> [unique_id "WNuUQ9BuloIAADjH@3MAAAAG"> [Wed Mar 29 04:02:27.596953 2017] [:error] [pid 14535] [client 12.34.56.78] ModSecurity: Rule processing failed. [hostname "whmcs.tld"> [uri "/submitticket.php"> [unique_id "WNuUQ9BuloIAADjH@3MAAAAG"> [Wed Mar 29 04:02:28.042947 2017] [:error] [pid 14535] [client 12.34.56.78] ModSecurity: Audit log: Failed to create subdirectories: /usr/local/apache/logs/modsec_audit/risp/20170329/20170329-0402 (Read-only file system) [hostname "whmcs.tld"> [uri "/submitticket.php"> [unique_id "WNuUQ9BuloIAADjH@3MAAAAG"> [Wed Mar 29 04:02:28.043133 2017] [:error] [pid 14535] [client 12.34.56.78] ModSecurity: Input filter: SecUploadDir is undefined, unable to store multipart files. [hostname "whmcs.tld"> [uri "/submitticket.php"> [unique_id "WNuUQ9BuloIAADjH@3MAAAAG"> [Wed Mar 29 07:38:48.728399 2017] [:error] [pid 19393] [client 12.34.56.78] ModSecurity: Exec: Execution failed while reading output: /etc/cxs/cxscgi.sh (End of file found) [hostname "whmcs.tld"> [uri "/admin/supporttickets.php"> [unique_id "WNvG@NBuloIAAEvBd1EAAAAC"> [Wed Mar 29 07:38:48.728439 2017] [:error] [pid 19393] [client 12.34.56.78] ModSecurity: Rule processing failed. [hostname "whmcs.tld"> [uri "/admin/supporttickets.php"> [unique_id "WNvG@NBuloIAAEvBd1EAAAAC"> [Wed Mar 29 07:38:48.887514 2017] [:error] [pid 19393] [client 12.34.56.78] ModSecurity: Audit log: Failed to create subdirectories: /usr/local/apache/logs/modsec_audit/risp/20170329/20170329-0738 (Read-only file system) [hostname "whmcs.tld"> [uri "/admin/supporttickets.php"> [unique_id "WNvG@NBuloIAAEvBd1EAAAAC"> [Wed Mar 29 07:38:48.887666 2017] [:error] [pid 19393] [client 12.34.56.78] ModSecurity: Input filter: SecUploadDir is undefined, unable to store multipart files. [hostname "whmcs.tld"> [uri "/admin/supporttickets.php"> [unique_id "WNvG@NBuloIAAEvBd1EAAAAC">
    0
  • jndawson
    We opened support ticket 8340785
    0
  • jndawson
    Update: The v.64 update changes the path for php temp sessions from /tmp to /var/cpanel/php/sessions. We had 'Jail Apache Virtual Hosts using mod_ruid2 and cPanel" jailshell' set to 'On'. Turning to off corrected the session errors and a bunch of other things. Thank you, cPanel people.
    0
  • cPanelMichael
    Hello @jndawson, Thank you for updating this thread with the outcome. For anyone interested, the corresponding thread on the issue that caused this problem is located at: SOLVED - cPanel & WHM 64 PHP session path errors
    0

Please sign in to leave a comment.