Page 1 of 1

Help - Perl CGI problem after ASL installation

Posted: Sun Apr 20, 2008 2:57 pm
by RichardM
Having just installed Atomic Secured Linux, I find that Perl CGI for form posts no longer works.

Specifically, if $ENV{'REQUEST_METHOD'} is POST, then this no longer works:

my $data;
read(STDIN, $data, $ENV{'CONTENT_LENGTH'});

This is a very serious problem for me, so any help would be much appreciated!

(How can I disable ASL until I find a solution?)

Posted: Mon Apr 21, 2008 6:50 am
by RichardM
Ha!

The problem is caused by my having a previous version of mod_security installed ( 1.8 ) . ASL then installs 2.5. When I comment out 1.8 in httpd.conf normal service is resumed:
#LoadModule security_module /usr/lib/httpd/modules/mod_security.so

(My guess is that mod_security1.8 picks up the post CGI and sanitizes it and locks it away someplace. Mod_security2.5 then tries the same thing and finds the post CGI values have gone away?)

Posted: Mon Apr 21, 2008 8:48 am
by scott
They definitely dont get along together.