Re: [mod-security-users] RE: Dynamic Disable Post Scanning / Chroot issue

[Ivan R. <iv...@we...>]

mic...@km... wrote:

> Hi Ivan,
> 
> Problem on disable post scanning fixed using the CVS version.
> 
> Now, i try to use the chroot function of mod_security. So far everything 
> okay. The environment is Apache2 + PHP + MySQL runing Xoops (a content 
> management system). To communicate with MySQL, i need to set up a hard 
> link in the chrooted environment for "mysql.sock".

  That's one of the possible ways to do it, yes.


> If all modules need to be copied, it defeat the beauty of mod_security's 
> chroot. Any suggestion or solution on this issue?

  It will work if you stop Apache first, then start it again. Options
  restart and graceful cannot work since the configuration fiels are
  outside the jail.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]