Geoiplookup unable to lock proc mutex for non-httpd users

[rcbarnett-zz]

MODSEC-278: When using ModSecurity with a per-user request handling module such as MPM-ITK or mod_ruid2, geoiplookup will not be able to lock the proc mutex and thus fail to do the lookup:

Message: Geo Lookup: Failed to lock proc mutex: Permission denied

Vhosts/directories that do not have a specific user assigned, but rather the 'global' httpd user, do not get this error message.

[rcbarnett-zz]

Original reporter: lb06

[rcbarnett-zz]

lb06: FYI: A workaround is possible using libapache2-mod-geoip. This module populates the ENV variables with GEO* data. You can then perform GEO lookups using SecRule ENV:GEOIP_* rather than with GEO:*.

[victorhora]

The global mutex is optional since 112ba45 (included in 2.9.2 release)

This shouldn't be a concern with libModSecurity (aka 3.0) and libMaxMind.

Cheers