• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue Selinux switches to permissive when updating modsecurity rules

ivanes82

Basic Pleskian
Server operating system version
Almalinux 8.10
Plesk version and microupdate number
Plesk Obsidian 18.0.65, #1
Every night only selinux is changed to permissive. The only recent change I have made on the server, was to change the modsecurity ruleset from comodo to Atomic Standard, because comodo for whatever reason does not install correctly and was giving problems. I have been manually setting selinux to forced for several days, but at night it changes back. Today I tried to run plesk daily UpdateModSecurityRuleSet to force the modsecurity update, and at the end I had selinux back to permissive. Is this behavior normal? Does it only happen to me or does it happen to someone else? Thank you very much.
 
I have changed the Atomic Standard rules updates from daily to weekly. If tonight doesn't put selinux on permissive, I could say that the modsecurity rules update leaves selinux on permissive. I will comment tomorrow.
 
Indeed, by disabling the daily updates of the modsecurity rules, selinux is no longer set to permissive. Is this behavior normal? Is it a generalized bug or does it only affect my server?
 
Can someone please tell me if it is normal that when atomicorp modsecurity rules are updated selinux is set to permissive, and once the update is finished selinux is kept in permissive.

Thank you very much.
 
Back
Top