Resolved Service apache down after update yum / Origin Modsecurity

[Erwan]

Server operating system version

AlmaLinux 9.4

Plesk version and microupdate number

18.0.71

Hi all,
To begin with, we encountered this problem on three servers (out of six updated servers).

Problem: the Apache service went down after the following process:
- Update from Plesk 69 to 71 via the interface. All services then worked.
- System update using the command:
#yum makecache --refresh
Then:
#yum update

The process completed, but we then noticed that the Apache service was down.
After further investigation, it turned out that this was caused by Modsecurity.

When we want to restart Apache:
#systemctl restart httpd

We have this error:
httpd: Syntax error on line 358 of /etc/httpd/conf/httpd.conf: Syntax error on line 13 of /etc/httpd/conf.d/00_mod_security.conf: Include/IncludeOptional: No matches for the wildcard '00*

We tried to change Include by IncludeOptional...
But then we come across syntax problems:
AH00526: Syntax error on line 6035 of /etc/httpd/conf/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf...
httpd[3591390]: Error creating rule: Error compiling pattern (offset 4): invalid range in character class...

We had to disable Modsecurity to be able to restart Apache.

Has anyone else encountered this issue or has a solution?
We have suspended updates in the meantime as the issue occurs on every other server.

Thank you.

Erwan

 

[Erwan]

Are we the only ones experiencing this problem?

 

[Sebahat.hadzhi]

Hello, Erwan. What's the ruleset you are using, please? Maybe this could help:

• https://support.plesk.com/hc/en-us/...n-Plesk-when-using-Comodo-ModSecurity-ruleset

 

[Erwan]

Hello,
We use Comodi (free) rules.

We solved the problem (or worked around it) by selecting execution by Nginx (Modsecurity 3) instead of Apache (Modsecurity 2.9).