[mod-security-users] apache2 mod_perl chroot problem!

[Henning M. <Hen...@gm...>]

Hello *,

I have got problems running an apache-2.0.47-prefork with
modperl-1.99_09_20030807 and mod_security-1.7.4.
I've define a VirtualHost which is defined using the file attached to the
bottom.
This VHost works fine. My mod_security section looks like:
LoadModule security_module    modules/mod_security.so
If I now add:
<IfModule mod_security.c>
SecChrootDir /jail
</IfModule>
The static pages work very good, but if I do a request like:
https://myserver.com/bin/login.pl the server delivers an empty (0 Bytes)
file login.pl for download.
My Filesystem looks like:

/webapp/system/static.html
/webapp/bin/login.pl
and the same (copies) in:
/jail/webapp/system/static.html
/jail/webapp/bin/login.pl

Please help, what do I wrong?

Henning



<IfDefine SSL>
<IfDefine !NOSSL>
<VirtualHost _default_:443>
        DocumentRoot "/webapp/system"
        ErrorLog /var/log/apache2/error_log
        TransferLog /var/log/apache2/access_log

<Directory "/webapp/system">
    Options -FollowSymLinks
    Allow from all
</Directory>

<IfModule mod_alias.c>
        <IfModule mod_perl.c>
                Alias /bin/          "/webapp/bin/"
                PerlModule Apache2
                PerlModule Apache::compat
                PerlModule ModPerl::RegistryBB
                PerlSetEnv DB2INSTANCE db2inst1
                Perlrequire /webapp/startup2.pl
                PerlSwitches -T
                <Directory /webapp/bin>
                        SetHandler  perl-script
                        PerlSendHeader On
                        PerlResponseHandler ModPerl::RegistryBB
                        Allow from all
                        Options ExecCGI
                            SetEnv
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/home/db2inst1/sqllib/lib
                            SetEnv LIBPATH "/home/db2inst1/sqllib/lib"
                            SetEnv DB2INSTANCE "db2inst1"
                </Directory>
        </IfModule>
</IfModule>
        SSLEngine on
        SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
        SSLCertificateFile /etc/apache2/ssl.crt/server.cert.cert
        SSLCertificateKeyFile /etc/apache2/ssl.crt/server.cert.key
        SetEnvIf User-Agent ".*MSIE.*" \
                 nokeepalive ssl-unclean-shutdown \
                 downgrade-1.0 force-response-1.0
        CustomLog /var/log/apache2/ssl_request_log   ssl_combined
</VirtualHost>
</IfDefine>
</IfDefine>