[mod-security-users] problem with clamav integration
Brought to you by:
victorhora,
zimmerletw
|
From: Justin G. <web...@sw...> - 2005-11-22 04:08:35
|
hi, I've installed clamav and the perl script, set permissions to /tmp/webfiles as mentioned in the docs but I get 500 error for any file I upload... here is the output from the debug_log: [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][2] Detection phase starting (request 97e8228): "POST /myscript/actions.php?m=put&up=1 HTTP/1.1" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] sec_auditlog_init: Starting [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Normalised REQUEST_URI: "/myscript/actions.php?m=put&up=1" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][2] Parsing arguments... [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Adding parameter "m"="put" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Adding parameter "up"="1" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Adding cookie "EZKLMN"="eF4rLy8vLU4tsipOsTAvKy0vLAYAP10G6w==" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][3] Content-Type is "multipart/form-data; boundary=---------------------------14369700884912692551997532295" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][2] read_post_payload: Created file to store request body: /tmp/webfiles/20051122-055521-192.168.1.55-request_body-hk5q0J [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][5] read_post_payload: read 270 bytes [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][5] read_post_payload: read 2141 bytes [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][5] read_post_payload: read 986 bytes [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][5] read_post_payload: read 590 bytes [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] verify_uploaded_file: executing "/usr/bin/modsec-clamscan.pl" to verify "/tmp/webfiles/20051122-055521-192.168.1.55-cart.jpg" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][1] Access denied with code 500. Error verifying files: Received no output from the approver script (execution failed?) "/usr/bin/modsec-clamscan.pl" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Logging phase starting [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] sec_guardian_logger: Starting [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][2] sec_audit_logger_serial: Starting [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Multipart: deleting temporary file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Multipart: Deleted empty file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Multipart: deleting temporary file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][1] Multipart: Failed to delete empty file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" because 2(No such file or directory) [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Multipart: deleting temporary file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][1] Multipart: Failed to delete empty file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" because 2(No such file or directory) [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Multipart: deleting temporary file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][1] Multipart: Failed to delete empty file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" because 2(No such file or directory) [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Multipart: deleting temporary file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][1] Multipart: Failed to delete empty file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" because 2(No such file or directory) [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Multipart: deleting temporary file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][1] Multipart: Failed to delete empty file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" because 2(No such file or directory) [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][4] Multipart: deleting temporary file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][1] Multipart: Failed to delete empty file (part) "/tmp/webfiles/20051122-055521-192.168.1.55-" because 2(No such file or directory) [22/Nov/2005:05:55:21 +0200] [XXX.XXX.COM/sid#9af17e0][rid#97e8228][/myscript/actions.php][2] request_body_file_cleanup: Deleted file "/tmp/webfiles/20051122-055521-192.168.1.55-request_body-hk5q0J" What am I doing wrong? thanks, Justin |