Re: [mod-security-users] When will we see 1.8?

[Mark <ad...@as...>]

Ivan Ristic wrote:

>>>   BTW, I've also added a check to v1.8. If chroot fails for any
>>>   reasons, Apache will refuse to serve requests.
>>
>> I have a request, though. Can you make it so, that, instead of not
>> serving requests, Apache will exit? (with a log message, of course).
>
>   Actually, that's what it does at the moment. But there is a catch.
>   Since at that time the configuration phase is over, it is only
>   one child that exits. I cannot affect other Apache processes.

I hadn't thought of that. No bid deal, though: "MinSpareServers" should
take care of respawning a new child.

>> Besides, I believe it is quite fair for mod_security to treat not
>> being able to chroot as a critical, abortable, error, like Apache
>> missing a log-file (after which Apache exists too).
>
>   I agree but it can't be done any other way. That's the drawback
>   of not patching the source code and working from a module.

Thanks for your hard work anyway. I am quite happy with the mod approach as
it is. :) I just grabbed 1.8dev2, and will try it out.

Cheers!

- Mark

        System Administrator Asarian-host.org

---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx