[mod-security-users] Re: mod_ssl: Child could not open SSLMutex lockfile

[peceka <pe...@gm...>]

Hi Ivan,


I've got this same error (FreeBSD and apache+mod_ssl-1.3.33+2.8.22).

In httpd.conf I've got:

<IfModule mod_security.c>

    SecChrootLock modsec_chroot.lock
    SecChrootDir /usr/chroot/apache

</IfModule>


When I hadn't go SecChrootLock in my /var/log/httpd-error.log i've got:
[Fri May 27 16:14:37 2005] [info] mod_unique_id: using ip 1.2.3.4
[Fri May 27 16:14:38 2005] [error] mod_security: unable to create chroot 
lock "/usr/local/logs/modsec_chroot.lock", errno=2(No such file or 
directory)

even if i've got /usr/local/logs in my /usr/chroot/apache...

So I've added SecChrootLock modsec_chroot.lock and now it's ok.

But returning to main topic ;)

web2# ls -lR /usr/chroot/apache/
total 4
drwxr-xr-x  3 root  wheel  512 May 27 16:08 usr
drwxr-xr-x  3 root  wheel  512 May 27 15:59 var

/usr/chroot/apache/usr:
total 2
drwxr-xr-x  3 root  wheel  512 May 27 16:09 local

/usr/chroot/apache/usr/local:
total 2
drwxr-xr-x  3 root  wheel  512 May 27 16:09 logs

/usr/chroot/apache/usr/local/logs:
total 2
drwxr-xr-x  2 www  www  512 May 27 16:09 ssl_scache

/usr/chroot/apache/usr/local/logs/ssl_scache:
total 0

/usr/chroot/apache/var:
total 2
drwxrwxrwx  2 root  wheel  512 May 27 16:14 run

/usr/chroot/apache/var/run:
total 0


And now after staring Apache i've got in /var/log/httpd-error.log:
[Fri May 27 16:42:56 2005] [info] mod_unique_id: using ip addr 1.2.3.4
[Fri May 27 16:42:57 2005] [notice] mod_security: chroot checkpoint #1 
(pid=4068 ppid=4061)
[Fri May 27 16:42:57 2005] [info] (2)No such file or directory: 
make_sock: for port 443, setsockopt: (SO_ACCEPTFILTER)
[Fri May 27 16:42:57 2005] [info] (2)No such file or directory: 
make_sock: for port 80, setsockopt: (SO_ACCEPTFILTER)
[Fri May 27 16:42:57 2005] [warn] pid file /var/run/httpd.pid 
overwritten -- Unclean shutdown of previous Apache run?
[Fri May 27 16:42:57 2005] [info] mod_unique_id: using ip addr 1.2.3.4
[Fri May 27 16:42:58 2005] [notice] mod_security: chroot checkpoint #2 
(pid=4069 ppid=1)
[Fri May 27 16:42:58 2005] [notice] mod_security: chroot successful, 
path=/usr/chroot/apache
[Fri May 27 16:42:58 2005] [notice] Microsoft-IIS/5.0 configured -- 
resuming normal operations
[Fri May 27 16:42:58 2005] [error] mod_ssl: Child could not open 
SSLMutex lockfile /var/run/ssl_mutex.4068 (System error follows)
[Fri May 27 16:42:58 2005] [error] mod_ssl: Child could not open 
SSLMutex lockfile /var/run/ssl_mutex.4068 (System error follows)
[Fri May 27 16:42:58 2005] [error] mod_ssl: Child could not open 
SSLMutex lockfile /var/run/ssl_mutex.4068 (System error follows)
[Fri May 27 16:42:58 2005] [error] mod_ssl: Child could not open 
SSLMutex lockfile /var/run/ssl_mutex.4068 (System error follows)
[Fri May 27 16:42:58 2005] [error] mod_ssl: Child could not open 
SSLMutex lockfile /var/run/ssl_mutex.4068 (System error follows)
[Fri May 27 16:42:58 2005] [info] Server built: May  8 2005 08:16:10
[Fri May 27 16:42:58 2005] [error] System: No such file or directory 
(errno: 2)
[Fri May 27 16:42:58 2005] [error] System: No such file or directory 
(errno: 2)
[Fri May 27 16:42:58 2005] [error] System: No such file or directory 
(errno: 2)
[Fri May 27 16:42:58 2005] [error] System: No such file or directory 
(errno: 2)
[Fri May 27 16:42:58 2005] [error] System: No such file or directory 
(errno: 2)
[Fri May 27 16:42:58 2005] [notice] Accept mutex: flock (Default: flock)
[Fri May 27 16:42:59 2005] [error] mod_ssl: Child could not open 
SSLMutex lockfile /var/run/ssl_mutex.4068 (System error follows)
[Fri May 27 16:42:59 2005] [error] System: No such file or directory 
(errno: 2)
[Fri May 27 16:43:00 2005] [error] mod_ssl: Child could not open 
SSLMutex lockfile /var/run/ssl_mutex.4068 (System error follows)
[Fri May 27 16:43:00 2005] [error] mod_ssl: Child could not open 
SSLMutex lockfile /var/run/ssl_mutex.4068 (System error follows)
[Fri May 27 16:43:00 2005] [error] System: No such file or directory 
(errno: 2)
[Fri May 27 16:43:00 2005] [error] System: No such file or directory 
(errno: 2)
[Fri May 27 16:43:01 2005] [error] mod_ssl: Child could not open 
SSLMutex lockfile /var/run/ssl_mutex.4068 (System error follows)

I think that i've got correct directory structure and Apache have got 
perm to write in dirs...


Best Regards,
p.