403 error on install

larryl

Joined: 2002-09-16
Posts: 47
Posted: Thu, 2005-04-21 14:24

I'm getting an error on Step 4 of the install, Storage Setup. The directory is created and (for now) chmod'ed 777. I'm getting 403: Forbidden when I click save on that screen. "You don't have permission to access /beta/gallery2/install/index.php on this server."

/beta/gallery/install/index.php is 777, as is the entire install directory.

error_log says this:

mod_security: Access denied with code 403. Pattern match "(/dev/shm|/tmp|/var/tmp|/var|wget|/home/virtual|/etc/)" at ARGS_VALUES [hostname "www.xxx.com"] [uri "/beta/gallery2/install/index.php?step=4"] [unique_id oVZq6UMPQFUAADWwBNsAAAAL]

Obviously mod_security is unhappy with something. Any thoughts?

Thanks,
Larry

----

Gallery URL (optional):
Gallery version: 2.0 beta 2
Webserver (with version): apache 2.0.46
Datatabase (with version): mysql Ver 11.18 Distrib 3.23.58
PHP version (eg 4.2.1): 4.3.8
phpinfo URL (optional):
Graphics Toolkit(s): not there yet
Operating system: red hat 7.3
Web browser/version: ie 6
G1 version (for migration bugs):
 
larryl

Joined: 2002-09-16
Posts: 47
Posted: Thu, 2005-04-21 15:04

More info.

<?php system("pwd"); ?> returns the exact same directory as I have entered into step 4.

<?php if (is_writable('path/to/g2data')) { print "yay"; } else { print "boo"; } ?> returns yay, so the directory is writable.

Here's the phpinfo:

http://www.photograsea.com/beta/gallery2/g2data/phpinfo.php
 
valiant

Joined: 2003-01-04
Posts: 32509
Posted: Thu, 2005-04-21 16:13

mod_security?
i guess someone had also a problem with mod_security,
see: http://gallery.menalto.com/index.php?name=PNphpBB2&file=viewtopic&t=27645&highlight=modsecurity

already asked the mod_security devs? maybe they know more.
http://www.modsecurity.org/
 
larryl

Joined: 2002-09-16
Posts: 47
Posted: Thu, 2005-04-21 17:02
valiant wrote:
mod_security?

Definitely. I disabled mod_security and the install went smoothly. After installation I enabled mod_security again and things seem to be well.

I need to figure out what the deal with install is, though, as there are ~40 Gallery instances on this box that will ultimately need to be upgraded. I don't want to have to turn off mod_security for each one.