SecUploadDir /tmp modsecurity ignores and tries to write to /

[gjvanetten]

RHEL 7

v3/Master

SecTmpDir /tmp
SecDataDir /tmp
SecUploadDir /tmp
SecUploadKeepFiles On
SecUploadFileMode 0600

debug set to 9 shows

[4] Starting phase REQUEST_BODY. (SecRules 2)
[9] Multipart: Boundary: ---------------------------491299511942
[9] Multipart: Added part header "Content-Disposition" "form-data; name="fileName"; filename="bear.tif"".
[9] Multipart: Added part header "Content-Type" "image/tiff".
[9] Multipart: Content-Disposition name: fileName.
[9] Multipart: Content-Disposition filename: bear.tif.
[1] Multipart: Failed to create file: /20180322-153622-152173297762.732387-file-XXXXXX
[1] Multipart: Final boundary missing.
[4] Multipart: Cleanup started (remove files True)

Thanks
Jim

[zimmerle]

Hi @gjvanetten,

is this a Nginx? do you mind to post the config on gists?

[gjvanetten]

nginx/1.13.9

https://gist.github.com/gjvanetten/a4c008e67bb99543213aca5599a09d9f

[zimmerle]

Hi @gjvanetten,

Do you mind to test the branch: v3/dev/issue_1720 ?

[gjvanetten]

That looks like it fixed the issue:

[9] Multipart: Boundary: ---------------------------491299511942
[9] Multipart: Added part header "Content-Disposition" "form-data; name="fileName"; filename="bear.tif"".
[9] Multipart: Added part header "Content-Type" "image/tiff".
[9] Multipart: Content-Disposition name: fileName.
[9] Multipart: Content-Disposition filename: bear.tif.
[4] Multipart: Created temporary file 1 (mode 04o): /tmp/20180323-164146-152182330683.658008-file-MOmNjP
[9] Multipart: Added file part to the list: name "fileName" file name "bear.tif" (offset 141, length 482700)

Thanks
Jim