[Bug 988819] Re: wrong path to libxml2.so.2 in mod_security

[Robie Basak]

** Description changed:

+ [Impact]
+ 
+ The libapache2-modsecurity package does not work out of the box (but a
+ workaround is available).
+ 
+ [Test Case]
+ 
+ apt-get -y install apache2 libapache2-modsecurity
+ 
+ This fails with the following error, although the postinst does exit 0:
+  Setting up libapache2-modsecurity (2.6.3-1) ...
+  Action 'configtest' failed.
+  The Apache error log may have more information.
+  Your apache2 configuration is broken, so we're not restarting it for you.
+ 
+ $ sudo apachectl configtest
+ apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/mod-security.load: Cannot load /usr/lib/libxml2.so.2 into server: /usr/lib/libxml2.so.2: cannot open shared object file: No such file or directory
+ Action 'configtest' failed.
+ The Apache error log may have more information.
+ 
+ [Fix]
+ 
+ Debian has fixed this by updating apache2 to use dlopen's search path
+ and changing mod-security.load to not use any absolute path. We have
+ merged apache2 and synced modsecurity-apache and verified that Quantal
+ is fixed.
+ 
+ For Precise, we have backported the upstream apache2 dlopen search path
+ modification, and fixed the path in mod-security.load the same as
+ Debian.
+ 
+ [Regression Potential]
+ 
+ The modsecurity-apache fix is just the load path, so it should either
+ work or fail. I can't see any potential for regression here.
+ 
+ The apache2 fix involves changing the behaviour of dynamic module loads.
+ There is now a fallback to use the dlopen search path if the name does
+ not use an absolute path. If there is a regression, it will probably be
+ with edge cases to do with module load paths and likely manifest
+ themselves as modules failing to load. "sudo apachectl configtest"
+ should reveal these.
+ 
+ 
+ Original bug description:
+ 
  service apache2 restart
  apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/mod-security.load: Cannot load /usr/lib/libxml2.so.2 into server: /usr/lib/libxml2.so.2: cannot open shared object file: No such file or directory
  Action 'configtest' failed.
  The Apache error log may have more information.
-    ...fail!
- 
+    ...fail!
  
  in file /etc/apache2/mods-enabled/mod-security.load:
  LoadFile /usr/lib/libxml2.so.2
  
- 
  correct path on x86 would be /usr/lib/i386-linux-gnu/libxml2.so.2
  
  maybe a symlink could fix this issue?

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in Ubuntu.
https://bugs.launchpad.net/bugs/988819

Title:
  wrong path to libxml2.so.2 in mod_security

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/988819/+subscriptions