modsecurity phpmyadmin error

[saviorhost]

I enabled ModSecurity. However, I get an error when I try to upload SQL through phpMyAdmin.

Forbidden

You don't have permission to access this resource.

[Tobi]

Just disable ModSecurity?

[saviorhost]

Just disable ModSecurity?

Wouldn't server security be a problem? Many different websites are hosted there.

[saviorhost]

Is there anyone who can offer help?

[Tobi]

What kind of issue do you expect?
In fact nobody uses ModSecurity and everybody is fine.

[saviorhost]

What kind of issue do you expect?
In fact nobody uses ModSecurity and everybody is fine.

I'm a hosting company. Even now, I host hundreds of websites. That's why I need to provide protection.

[mhagge]

But that's also the reason for the problems. mod_security isn't a system to turn on and forget about; it requires fine-tuning, adaptation to the software used, and constant monitoring; otherwise, you'll end up with false positives forever. This is - especially as a host with hundreds of websites – practically impossible, some customer is probably using something or using something in such a way that mod_security causes problems and you have to adapt it for that.

In this respect, @Tobi's advice is correct - in such an environment, mod_security cannot be used effectively without encountering various minor and major problems

If it prevents SQL files from being uploaded to PHPMyAdmin, it ultimately does exactly what it's intended to do. If you don't want that, you have to define an appropriate exception. But as I said: especially with customers it's practically impossible, they just see something that doesn't work.

[Jolinar]

Is there anyone who can offer help?

The issue could be fixed by targeted whitelisting instead of full disablement.

Check ModSecurity logs for the blocking rule ID, then whitelist it or the /phpMyAdmin/ path in the config (/etc/modsecurity.d/). This should preserves overall security.

[Tobi]

@saviorhost
Do you use KeyHelp Pro?
Putting customers in jailroot is probably the best security you can get.

[saviorhost]

@saviorhost
Do you use KeyHelp Pro?
Putting customers in jailroot is probably the best security you can get.

Yes, I use KeyHelp Pro. How exactly do I install jailroot? Is there an article or topic about it?

[Alexander]

To enable it for a client:
- "User Administration -> Add or edit a client -> Permissions -> Enable SSH + Restricted SSH environment"

Further configuration can be done here:
- "Configuration -> Restricted SSH Environment"

[saviorhost]

To enable it for a client:
- "User Administration -> Add or edit a client -> Permissions -> Enable SSH + Restricted SSH environment"

Further configuration can be done here:
- "Configuration -> Restricted SSH Environment"

Dear Aleksander;

Yes, I saw that. What do I need to write there? Is there any document related to it?

[Alexander]

What do I need to write there?

Where exactly?

[saviorhost]

What do I need to write there?

Where exactly?

Configuration -> Restricted SSH Environment