Author Topic: yum update after get mod security issue cant start apache  (Read 407 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
yum update after get mod security issue cant start apache
« on: May 11, 2017, 03:32:36 PM »
hi
my system:
Apache version: Apache/2.4.25
PHP version: 5.4.45 [PHP Switcher]
MySQL version: 5.5.48
FTP version: 1.0.36

CWP version: 0.9.8.234

i've update yum update after that i get this errors.

i have rebuilt apache, uninstall and also install modsecurity.

Code: [Select]
Stopping httpd: [FAILED]
Starting httpd: [Thu May 11 15:23:04.763278 2017] [so:warn] [pid 13726:tid 140386344380160] AH01574: module rpaf_module is already loaded, skipping
[Thu May 11 15:23:04.763486 2017] [so:warn] [pid 13726:tid 140386344380160] AH01574: module suphp_module is already loaded, skipping
[Thu May 11 15:23:04.803593 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 2 will probably never match because it overlaps an earlier Alias.
[Thu May 11 15:23:04.803627 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 3 will probably never match because it overlaps an earlier Alias.
[Thu May 11 15:23:04.803639 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 4 will probably never match because it overlaps an earlier Alias.
AH00526: Syntax error on line 97 of /usr/local/apache/modsecurity-owasp-old/modsecurity_crs_10_config.conf:
ModSecurity: Found another rule with the same id
[FAILED]

file /usr/local/apache/conf.d/mod_security.conf
Code: [Select]
LoadFile /usr/lib64/libxml2.so
LoadFile /usr/lib64/liblua-5.1.so

<IfModule !mod_security2.c>
  LoadModule security2_module  modules/mod_security2.so
</IfModule>

<IfModule mod_security2.c>
  <IfModule mod_ruid2.c>
    SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
    SecAuditLogType Concurrent
  </IfModule>
  <IfModule itk.c>
    SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
    SecAuditLogType Concurrent
  </IfModule>

  SecServerSignature "CentOS WebPanel: Protected by Mod Security"

  SecRuleEngine On
  SecAuditEngine RelevantOnly
  SecAuditLog /usr/local/apache/logs/modsec_audit.log
  SecDebugLog /usr/local/apache/logs/modsec_debug.log
  SecAuditLogType Serial
  SecDebugLogLevel 0
  SecRequestBodyAccess On
  SecDataDir /tmp
  SecTmpDir /tmp
  SecUploadDir /tmp
  SecCollectionTimeout 600
  SecPcreMatchLimit 1250000
  SecPcreMatchLimitRecursion 1250000
  Include "/usr/local/apache/modsecurity-owasp-old/owasp.conf"
</IfModule>

>>>>

if i remove below the line in /usr/local/apache/conf.d/mod_security.conf

Code: [Select]
Include "/usr/local/apache/modsecurity-owasp-old/owasp.conf"


mod security error gone and apache restart well but there is warnings stay with it.

Code: [Select]
[so:warn] [pid 13726:tid 140386344380160] AH01574: module rpaf_module is already loaded, skipping
[Thu May 11 15:23:04.763486 2017] [so:warn] [pid 13726:tid 140386344380160] AH01574: module suphp_module is already loaded, skipping
[Thu May 11 15:23:04.803593 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 2 will probably never match because it overlaps an earlier Alias.
[Thu May 11 15:23:04.803627 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 3 will probably never match because it overlaps an earlier Alias.
[Thu May 11 15:23:04.803639 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 4 will probably never match because it overlaps an earlier Alias.

Any help will be appreciated.

thanks.


« Last Edit: May 11, 2017, 04:19:03 PM by tristar78 »

Offline
*
Re: yum update after get mod security issue cant start apache
« Reply #1 on: May 11, 2017, 08:35:12 PM »
hello, i just investigated issue. found something.
my httpd.conf had duplicated line that i just needs to be removed these.

Code: [Select]
Include /usr/local/apache/conf/sharedip.conf
Include /usr/local/apache/conf.d/*.conf
ExtendedStatus On
<Directory "/usr/local/apache/htdocs">
        suPHP_UserGroup nobody nobody
</Directory>
Include /usr/local/apache/conf/sharedip.conf
Include /usr/local/apache/conf.d/*.conf
ExtendedStatus On

i have just remove these duplicated shit and after that rebuild mod security. Rebuild  vhost files. And it works again. 
thanks for reading. just want to share this.

happy CWP:)

« Last Edit: May 11, 2017, 08:51:15 PM by tristar78 »

Offline
*
Re: yum update after get mod security issue cant start apache
« Reply #2 on: May 15, 2017, 03:20:46 AM »
Thanks, I figured out the problem.

Offline
*
Re: yum update after get mod security issue cant start apache
« Reply #3 on: June 28, 2017, 09:48:50 PM »
Thanks. You save my day!