store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Wed Jun 19, 2013 8:39 am

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 2 posts ] 
Author Message
 Post subject: Suhosin False Positive
Unread postPosted: Mon Jun 11, 2012 12:22 pm 
Offline
Forum User
Forum User

Joined: Wed May 02, 2012 11:13 pm
Posts: 34
Location: CA
I'm getting a bunch of false positive errors : colo suhosin[3013]: ALERT - configured request variable name length limit exceeded - dropped variable

Is there a way for me to prevent this from occurring? Thanks


Top
 Profile  
 
 Post subject: Re: Suhosin False Positive
Unread postPosted: Mon Jun 11, 2012 12:58 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3264
Location: Chantilly, VA
(suhosin is not part of ASL, so this post has been moved from the ASL forums)

You will need to configure suhosin for your system to prevent false positives. By default suhosin restricts a lot of things, so you will likely need to change a lot more than this:

suhosin.request.max_varname_length

You need to set it as high as necessary for your system. Example:

suhosin.request.max_varname_length = 128

But you'll probably run into a lot more restrictions form suhosin, like GET variable limits and so on. In short, you need to really tune suhosin for your system or expect more false positives, or disable it.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 2 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group