Professional Web Applications Themes

Turning off mod_perl - PERL Modules

I had to upgrade my apache because of a security problem which PCI compliance demanded I resolve. Now I have mod_perl installed somehow, and the PCI scan is identifying that it now has a security problem and must be uninstalled. I never installed it in the first place, but they are showing that I have the following installed now: Apache/1.3.41 (Unix) mod_perl/1.29 mod_ssl/2.8.31 OpenSSL/0.9.8g I checked on how to install mod_perl, and found what text suppose to be added to the httpd.conf file to enable mod_perl. However, there is no such text in my httpd.conf file! If I search for ...

  1. #1

    Default Turning off mod_perl

    I had to upgrade my apache because of a security problem which PCI
    compliance demanded I resolve. Now I have mod_perl installed somehow,
    and the PCI scan is identifying that it now has a security problem and
    must be uninstalled. I never installed it in the first place, but they
    are showing that I have the following installed now:

    Apache/1.3.41 (Unix) mod_perl/1.29 mod_ssl/2.8.31 OpenSSL/0.9.8g

    I checked on how to install mod_perl, and found what text suppose to be
    added to the httpd.conf file to enable mod_perl. However, there is no
    such text in my httpd.conf file! If I search for mod_perl or modperl in
    the configuration file, it is simply not there. How can I turn off this
    phantom mod_perl? I legally have to shut it off for PCI compliance.

    Thanks,

    Marshall

    Marshall Guest

  2. #2

    Default Re: Turning off mod_perl

    Marshall Dudley wrote: 

    Which legal system has outlawed mod_perl?

    (And any method of shutting it off is legal, if it's your mod_perl).

    If it's loaded as a module then, somewhere in the (set of) conf files
    you should find something like:

    LoadModule perl_module extramodules/mod_perl.so

    i.e. a "LoadModule" command with a mod_perl.* option. Just comment it out.

    It's also possible that it hasn't been built as a separate module, but
    rather compiled into the Apache (particularly as it's a v1.x.x Apache).

    httpd -l

    will show you compiled-in modules.

    However, this is really an Apache question. mod_perl is a module for
    Apache that links in a perl interpreter. It's not an issue about perl
    modules.



    --
    Just because I've written it doesn't mean that
    either you or I have to believe it.
    Big Guest

  3. #3

    Default Re: Turning off mod_perl

    Big and Blue wrote: 
    >
    > Which legal system has outlawed mod_perl?[/ref]
    That is according to the McAfee PCI compliance department, I am not sure
    who makes the rules for PCI compliance. 
    No, I legally have to shut it off, but cannot find out how to do that. 
    execonn# ./httpd -l
    Compiled-in modules:
    http_core.c
    mod_env.c
    mod_log_config.c
    mod_mime.c
    mod_negotiation.c
    mod_status.c
    mod_include.c
    mod_autoindex.c
    mod_dir.c
    mod_cgi.c
    mod_asis.c
    mod_imap.c
    mod_actions.c
    mod_userdir.c
    mod_alias.c
    mod_rewrite.c
    mod_access.c
    mod_auth.c
    mod_so.c
    mod_setenvif.c
    mod_ssl.c
    suexec: disabled; invalid wrapper /usr/local/apache/bin/suexec

    execonn# grep mod_perl *
    execonn# pwd
    /usr/local/apache/conf

    It just isn't there in either.

    I will ask over at the Apache conference.

    Marshall
    Marshall Guest

  4. #4

    Default Re: Turning off mod_perl

    Marshall Dudley wrote: 
    > That is according to the McAfee PCI compliance department, I am not sure
    > who makes the rules for PCI compliance.[/ref]

    So it's not a legal system.

    --
    Just because I've written it doesn't mean that
    either you or I have to believe it.
    Big Guest

Similar Threads

  1. mod_perl and GD
    By Cliff Stanford in forum PERL Modules
    Replies: 0
    Last Post: March 2nd, 03:28 PM
  2. Mod_perl & do()
    By Mike Mimic in forum PERL Miscellaneous
    Replies: 5
    Last Post: September 13th, 10:37 AM
  3. [PHP] PHP and mod_perl
    By John Nichel in forum PHP Development
    Replies: 0
    Last Post: July 17th, 07:44 PM
  4. PHP and mod_perl
    By Jswalter in forum PHP Development
    Replies: 1
    Last Post: July 17th, 07:17 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139