> I have just found an interesting problem with a server running
> mod_security with the chroot option. It leads to a total lock-up of the
> server :-(
>
> ...
>
> However, when apache is running in a chroot with mod_security, the piped
> logging binary is outside the chroot, and the running httpd can't find it.
> More and more httpd processes get stuck trying to log, and eventually the
> server locks up as it reaches the maximum number of child processes.
>
> ...
>
> Any ideas & help appreciated. I'll have a look at the code myself, but
> don't know if I'll find a fix.
I don't think you can do much about it. As you say yourself, if the piped
logging binary is outside jail Apache won't be able to restart it. The best
you can do is move it into the jail again.
Bye,
Ivan
|