Nach Installation open_basedir Problem

[sufijen]

Hallo,

ich habe grad ganz frisch installiert nach der Step-by-Step-Installation.

Wenn ich nun auf gehe komm folgender Fehler:

Code:

Warning: file_exists() [function.file-exists]: open_basedir restriction in effect. File(/var/log/rkhunter.log) is not within the allowed path(s): (/var/www/ispcp/gui/:/etc/ispcp/:/var/run/ispcp.lock:/proc/:/bin/df:/bin/mount:/var/log/rkhunter.log:/var/log/chkrootkit.log:/usr/share/php/) in /var/www/ispcp/gui/admin/rootkit_log.php on line 56

Warning: file_exists() [function.file-exists]: open_basedir restriction in effect. File(/var/log/chkrootkit.log) is not within the allowed path(s): (/var/www/ispcp/gui/:/etc/ispcp/:/var/run/ispcp.lock:/proc/:/bin/df:/bin/mount:/var/log/rkhunter.log:/var/log/chkrootkit.log:/usr/share/php/) in /var/www/ispcp/gui/admin/rootkit_log.php on line 56

Hoffe ihr könnt mir weiterhelfen. Ich weiß nämlich nicht warum der fehler kommt.

EDIT: Im dir '/var/log' existiert weder die datei 'rkhunter.log' noch 'chkrootkit.log'

Ein benutzer kann bei mir anscheinend auch nicht angelegt werden!

Gruß Sufijen[/code]

[fabe]

hmmm *grübel* ich glaub ich hatte mal was ähnliches.

erstell einfach mal mit:
touch /var/log/rkhunter.log
touch /var/log/chkrootkit.log
die Fehlenden log files.


wenn das noch immer nichts bringt überprüf mal ob die beiden programme überhaupt installiert sind.

ansonsten poste einfach mal bitte deine
ispcp.conf, 00_master.conf aus /etc/apache2/sites-enabled




lg
fabe

[sufijen]

habe getouched:

Neuer Fehler:

Code:

Warning: fread() [function.fread]: Length parameter must be greater than 0 in /var/www/ispcp/gui/admin/rootkit_log.php on line 59

Warning: fread() [function.fread]: Length parameter must be greater than 0 in /var/www/ispcp/gui/admin/rootkit_log.php on line 59

Plus es kommt andauernd:

Code:

Fatal error: Out of memory (allocated 2359296) (tried to allocate 19456 bytes) in /var/www/ispcp/gui/include/client-functions.php on line 831

Wo stell ich denn die memory höher?

EDIT:

Mein Apache startet zwar aber mit wird nichts angezeigt!
Hier mal paar logs:

00_master.conf
ispcp.conf

ispcp_network.log

Code:

modprobe: Can't open dependencies file /lib/modules/2.6.9-023stab046.2-smp/modules.dep (No such file or directory)
iptables v1.3.6: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

error.log (apache2)

Code:

[Fri Jan 25 10:47:16 2008] [notice] Apache/2.2.3 (Debian) configured -- resuming normal operations
[Mon Jun 02 18:52:18 2008] [notice] Apache/2.2.3 (Debian) configured -- resuming normal operations
[Mon Jun 02 19:17:37 2008] [notice] caught SIGTERM, shutting down
[Mon Jun 02 17:19:08 2008] [notice] Apache/2.2.3 (Debian) configured -- resuming normal operations
[Mon Jun 02 17:26:38 2008] [notice] caught SIGTERM, shutting down
[Mon Jun 02 17:27:46 2008] [notice] Apache/2.2.3 (Debian) configured -- resuming normal operations
[Mon Jun 02 17:29:29 2008] [error] [client 62.103.159.170] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[Mon Jun 02 17:33:44 2008] [notice] caught SIGTERM, shutting down
[Mon Jun 02 17:33:50 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Mon Jun 02 17:33:50 2008] [notice] FastCGI: wrapper mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Mon Jun 02 17:33:50 2008] [notice] FastCGI: process manager initialized (pid 17990)
[Mon Jun 02 17:33:50 2008] [warn] FastCGI: server "/var/www/fcgi/master/php5-fcgi-starter" (uid 2000, gid 2000) started (pid 17991)
[Mon Jun 02 17:33:50 2008] [notice] Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 configured -- resuming normal operations
sh: error while loading shared libraries: libncurses.so.5: failed to map segment from shared object: Cannot allocate memory
Inconsistency detected by ld.so: dl-minimal.c: 84: __libc_memalign: Assertion `page != ((void *) -1)' failed!
[Mon Jun 02 18:36:04 2008] [notice] caught SIGTERM, shutting down
[Mon Jun 02 18:36:37 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Mon Jun 02 18:36:37 2008] [notice] FastCGI: wrapper mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Mon Jun 02 18:36:37 2008] [notice] FastCGI: process manager initialized (pid 3248)
[Mon Jun 02 18:36:37 2008] [warn] FastCGI: server "/var/www/fcgi/master/php5-fcgi-starter" (uid 2000, gid 2000) started (pid 3249)
[Mon Jun 02 18:36:37 2008] [notice] Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 configured -- resuming normal operations
[Mon Jun 02 18:36:37 2008] [alert] (12)Cannot allocate memory: apr_thread_create: unable to create worker thread
[Mon Jun 02 18:36:37 2008] [alert] (12)Cannot allocate memory: apr_thread_create: unable to create worker thread
[Mon Jun 02 18:36:39 2008] [alert] No active workers found... Apache is exiting!
[Mon Jun 02 18:42:04 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Mon Jun 02 18:42:04 2008] [notice] FastCGI: wrapper mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Mon Jun 02 18:42:04 2008] [notice] FastCGI: process manager initialized (pid 13464)
[Mon Jun 02 18:42:04 2008] [warn] FastCGI: server "/var/www/fcgi/master/php5-fcgi-starter" (uid 2000, gid 2000) started (pid 13468)
[Mon Jun 02 18:42:05 2008] [warn] pid file /var/run/apache2.pid overwritten -- Unclean shutdown of previous Apache run?
[Mon Jun 02 18:42:05 2008] [notice] Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 configured -- resuming normal operations
[Mon Jun 02 18:42:05 2008] [alert] (12)Cannot allocate memory: apr_thread_create: unable to create worker thread
PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/lib/php5/20060613+lfs/mysql.so' - libmysqlclient.so.15: failed to map segment from shared object: Cannot allocate memory in Unknown on line 0
[Mon Jun 02 18:42:11 2008] [alert] (12)Cannot allocate memory: apr_thread_create: unable to create worker thread
[Mon Jun 02 18:42:13 2008] [alert] (12)Cannot allocate memory: apr_thread_create: unable to create worker thread
[Mon Jun 02 18:42:15 2008] [alert] (12)Cannot allocate memory: apr_thread_create: unable to create worker thread
[...]

[gOOvER]

Das ist vServer, oder?

[sufijen]

Ja ist ein vServer sorry dass ich das nicht erwähnt habe


EDIT JEtzt funzt alles anscheinend außer folgender fehler:

Code:

Warning: fread() [function.fread]: Length parameter must be greater than 0 in /var/www/ispcp/gui/admin/rootkit_log.php on line 59
Warning: fread() [function.fread]: Length parameter must be greater than 0 in /var/www/ispcp/gui/admin/rootkit_log.php on line 59

Außerdem werden die ftp logins nicht angelegt. zumindest dauert es schon 5minuten^^

[fabe]

hmm gut ich habe die logfile nicht einmal....
aber laut der fehlermeldung sollte es reichen wenn du einfach was reinschreibst alla:

Code:

rootkit logfile

was die fehlermeldungen angeht bezüglich iptables,
frag mal bei deinem ISP nach, ob bei deinem VPS überhaupt die Iptables Kernel module Freigeschaltet sind.
Bei Einigen ISPs und Distros muss man im Standart Image erstmal Iptables nachinstallieren.


lg fabe

[sufijen]

Ne das ist nicht (mehr) das Problem irgendwie. Nach 3 Reboots war das Problem behoben!

In meinem direkten Post drüber wird mein einziges problem beschrieben.

++ dass schon seit 20min kein ftp user geadded wurde

[gurge]

Kann das sein das Cron jetzt rootkit durchlaufen lassen hat und du jetzt was in der log stehen hast?

wegen ftp user. läuft der Ispcp Daemon? (/etc/init.d/icpcp_daemon status)

[sufijen]

ispcp_daemon is running

ja /var/log/chkrootkit.log:

Code:

ROOTDIR is `/'
Checking `amd'... not found
Checking `basename'... not infected
Checking `biff'... not found
Checking `chfn'... not infected
Checking `chsh'... not infected
Checking `cron'... not infected
Checking `crontab'... not infected
Checking `date'... not infected
Checking `du'... not infected
Checking `dirname'... not infected
Checking `echo'... not infected
Checking `egrep'... not infected
Checking `env'... not infected
Checking `find'... not infected
Checking `fingerd'... not found
Checking `gpm'... not found
Checking `grep'... not infected
Checking `hdparm'... not found
Checking `su'... not infected
Checking `ifconfig'... not infected
Checking `inetd'... not infected
Checking `inetdconf'... not infected
Checking `identd'... not found
Checking `init'... not infected
Checking `killall'... not infected
Checking `ldsopreload'... not infected
Checking `login'... not infected
Checking `ls'... not infected
Checking `lsof'... not infected
Checking `mail'... not infected
Checking `mingetty'... not infected
Checking `netstat'... not infected
Checking `named'... not infected
Checking `passwd'... not infected
Checking `pidof'... not infected
Checking `pop2'... not found
Checking `pop3'... not found
Checking `ps'... not infected
Checking `pstree'... not infected
Checking `rpcinfo'... not infected
Checking `rlogind'... not found
Checking `rshd'... not found
Checking `slogin'... not infected
Checking `sendmail'... not infected
Checking `sshd'... not infected
Checking `syslogd'... not infected
Checking `tar'... not infected
Checking `tcpd'... not infected
Checking `tcpdump'... not infected
Checking `top'... not infected
Checking `telnetd'... not found
Checking `timed'... not found
Checking `traceroute'... not infected
Checking `vdir'... not infected
Checking `w'... not infected
Checking `write'... not infected
Checking `aliens'... no suspect files
Searching for sniffer's logs, it may take a while... nothing found
Searching for HiDrootkit's default dir... nothing found
Searching for t0rn's default files and dirs... nothing found
Searching for t0rn's v8 defaults... nothing found
Searching for Lion Worm default files and dirs... nothing found
Searching for RSHA's default files and dir... nothing found
Searching for RH-Sharpe's default files... nothing found
Searching for Ambient's rootkit (ark) default files and dirs... nothing found
Searching for suspicious files and dirs, it may take a while...
/lib/init/rw/.ramfs

Searching for LPD Worm files and dirs... nothing found
Searching for Ramen Worm files and dirs... nothing found
Searching for Maniac files and dirs... nothing found
Searching for RK17 files and dirs... nothing found
Searching for Ducoci rootkit... nothing found
Searching for Adore Worm... nothing found
Searching for ShitC Worm... nothing found
Searching for Omega Worm... nothing found
Searching for Sadmind/IIS Worm... nothing found
Searching for MonKit... nothing found
Searching for Showtee... nothing found
Searching for OpticKit... nothing found
Searching for T.R.K... nothing found
Searching for Mithra... nothing found
Searching for OBSD rk v1... nothing found
Searching for LOC rootkit... nothing found
Searching for Romanian rootkit... nothing found
Searching for Suckit rootkit... nothing found
Searching for Volc rootkit... nothing found
Searching for Gold2 rootkit... nothing found
Searching for TC2 Worm default files and dirs... nothing found
Searching for Anonoying rootkit default files and dirs... nothing found
Searching for ZK rootkit default files and dirs... nothing found
Searching for ShKit rootkit default files and dirs... nothing found
Searching for AjaKit rootkit default files and dirs... nothing found
Searching for zaRwT rootkit default files and dirs... nothing found
Searching for Madalin rootkit default files... nothing found
Searching for Fu rootkit default files... nothing found
Searching for ESRK rootkit default files... nothing found
Searching for rootedoor... nothing found
Searching for ENYELKM rootkit default files... nothing found
Searching for anomalies in shell history files... nothing found
Checking `asp'... not infected
Checking `bindshell'... INFECTED (PORTS:  465)
Checking `lkm'... You have   187 process hidden for readdir command
You have     2 process hidden for ps command
chkproc: Warning: Possible LKM Trojan installed
Checking `rexedcs'... not found
Checking `sniffer'... lo: not promisc and no packet sniffer sockets
venet0: not promisc and no packet sniffer sockets
venet0:0: not promisc and no packet sniffer sockets
Checking `w55808'... not infected
Checking `wted'... chkwtmp: nothing deleted
Checking `scalper'... not infected
Checking `slapper'... not infected
Checking `z2'... chklastlog: nothing deleted

[BeNe]

Dein einziges Problem ist das hier:

Code:

Fatal error: Out of memory

Deine Kistehat einfach zu wenig Arbeitsspeicher.
Am besten klärst Du uns mal auf was das für ein vServer ist und was alles drauf läuft.

Greez BeNe