[mod-security-users] mod_security v1.8.4 Chroot problem

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

I am trying to get mod_security chroot support working on my server, but I
am getting the following error.

[Tue Oct 12 11:30:14 2004] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Tue Oct 12 11:30:14 2004] [notice] LDAP: SSL support unavailable
[Tue Oct 12 11:30:14 2004] [notice] suEXEC mechanism enabled (wrapper:
/usr/sbin/suexec)
[Tue Oct 12 11:30:14 2004] [notice] mod_security: chroot checkpoint #1
(pid=2290 ppid=2289)
[Tue Oct 12 11:30:15 2004] [notice] Digest: generating secret for digest
authentication ...
[Tue Oct 12 11:30:15 2004] [notice] Digest: done
[Tue Oct 12 11:30:15 2004] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Tue Oct 12 11:30:15 2004] [notice] LDAP: SSL support unavailable
[Tue Oct 12 11:30:16 2004] [notice] mod_python: Creating 32 session mutexes
based on 150 max processes and 0 max threads.
[Tue Oct 12 11:30:16 2004] [notice] mod_security: chroot checkpoint #2
(pid=2291 ppid=1)
[Tue Oct 12 11:30:16 2004] [notice] mod_security: chroot successful,
path=/chroot/apache
[Tue Oct 12 11:30:16 2004] [error] (2)No such file or directory: could not
create /etc/httpd/run/httpd.pid
[Tue Oct 12 11:30:16 2004] [error] httpd: could not log pid to file
/etc/httpd/run/httpd.pid

The System is:- Fedora Core 2 (Full patched)
               Apache 2
               FrontPage Extensions
               SquirrelMail
               mod_security v1.8.4

I have configured mod_security as follows:-

Added SecChrootDir /chroot/apache to mod_security.conf

Created the following directory structure:    /chroot/apache
                                              /chroot/etc/httpd
                                              /chroot/var/log/httpd
                                              /chroot/var/run

I have created two symbolic links in /chroot/etc/httpd to
/chroot/var/log/httpd and /chroot/var/run

Unfortunately I seem to be going around in circles trying to sort this
problem, so your help would be most appreciated.

Many thanks.

Gareth Ledger  

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.775 / Virus Database: 522 - Release Date: 08/10/2004