openresty支持modescurity吗？

baalchina

Hi，之前我用nginx+modsecurity可以正常使用，今天想测试下openresty，结果遇到了以下的情况：

Oct  3 15:40:01 openresty systemd: Started Session 14 of user root.
Oct  3 15:43:35 openresty abrt-hook-ccpp: Process 1645 (nginx) of user 99 killed by SIGABRT - dumping core
Oct  3 15:43:35 openresty abrt-server: Executable '/opt/openresty/nginx/sbin/nginx' doesn't belong to any package and ProcessUnpackaged is set to 'no'
Oct  3 15:43:35 openresty abrt-server: 'post-create' on '/var/spool/abrt/ccpp-2019-10-03-15:43:35-1645' exited with 1
Oct  3 15:43:35 openresty abrt-server: Deleting problem directory '/var/spool/abrt/ccpp-2019-10-03-15:43:35-1645'
Oct  3 15:43:36 openresty abrt-hook-ccpp: Process 1655 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:36 openresty abrt-hook-ccpp: Process 1660 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:36 openresty abrt-hook-ccpp: Process 1662 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:36 openresty abrt-hook-ccpp: Process 1664 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:36 openresty abrt-hook-ccpp: Process 1666 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:37 openresty abrt-hook-ccpp: Process 1668 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:37 openresty abrt-hook-ccpp: Process 1670 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:37 openresty abrt-hook-ccpp: Process 1672 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:37 openresty abrt-hook-ccpp: Process 1674 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:37 openresty abrt-hook-ccpp: Process 1676 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:37 openresty abrt-hook-ccpp: Process 1678 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:37 openresty abrt-hook-ccpp: Process 1680 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:37 openresty abrt-hook-ccpp: Process 1682 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:37 openresty abrt-hook-ccpp: Process 1684 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:38 openresty abrt-hook-ccpp: Process 1686 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)
Oct  3 15:43:38 openresty abrt-hook-ccpp: Process 1688 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)

只要挂载modsecurity的配置文件，openresty就起不来，报以上错误。

系统是CentOS7，openresty1.15.8.2，modsecurity使用的是nginx连接器，安装过程和之前nginx下安装是一样的，也没有报错。

能否指点下具体该怎么查找错误？

谢谢！

baalchina

我测试了下，在modescurity里的，之前有个配置

   include /opt/openresty/nginx/conf/rules/*.conf

这条只要注释掉，或者将*改为特定的一条规则，openresty就没问题了。

这个规则是github上下载的（https://github.com/SpiderLabs/owasp-modsecurity-crs，rule文件夹），有53个文件，是否和这个特定规则有关呢？

在 2019年10月3日星期四 UTC+8下午3:54:06，Wu Xin写道：

Hi，之前我用nginx+modsecurity可以正常使用，今天想测试下openresty，结果遇到了以下的情况：

Oct 3 15:40:01 openresty systemd: Started Session 14 of user root. Oct 3 15:43:35 openresty abrt-hook-ccpp: Process 1645 (nginx) of user 99 killed by SIGABRT - dumping core Oct 3 15:43:35 openresty abrt-server: Executable '/opt/openresty/nginx/sbin/nginx' doesn't belong to any package and ProcessUnpackaged is set to 'no' Oct 3 15:43:35 openresty abrt-server: 'post-create' on '/var/spool/abrt/ccpp-2019-10-03-15:43:35-1645' exited with 1 Oct 3 15:43:35 openresty abrt-server: Deleting problem directory '/var/spool/abrt/ccpp-2019-10-03-15:43:35-1645' Oct 3 15:43:36 openresty abrt-hook-ccpp: Process 1655 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:36 openresty abrt-hook-ccpp: Process 1660 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:36 openresty abrt-hook-ccpp: Process 1662 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:36 openresty abrt-hook-ccpp: Process 1664 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:36 openresty abrt-hook-ccpp: Process 1666 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:37 openresty abrt-hook-ccpp: Process 1668 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:37 openresty abrt-hook-ccpp: Process 1670 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:37 openresty abrt-hook-ccpp: Process 1672 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:37 openresty abrt-hook-ccpp: Process 1674 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:37 openresty abrt-hook-ccpp: Process 1676 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:37 openresty abrt-hook-ccpp: Process 1678 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:37 openresty abrt-hook-ccpp: Process 1680 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:37 openresty abrt-hook-ccpp: Process 1682 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:37 openresty abrt-hook-ccpp: Process 1684 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:38 openresty abrt-hook-ccpp: Process 1686 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash) Oct 3 15:43:38 openresty abrt-hook-ccpp: Process 1688 (nginx) of user 99 killed by SIGABRT - ignoring (repeated crash)

只要挂载modsecurity的配置文件，openresty就起不来，报以上错误。

系统是CentOS7，openresty1.15.8.2，modsecurity使用的是nginx连接器，安装过程和之前nginx下安装是一样的，也没有报错。

能否指点下具体该怎么查找错误？

谢谢！