Hi,

I'm receiving a false positive on rule "#300076 Spam: Hidden Text Exploit".

I've reported it as a false positive everyday for the last week through the GUI and nothing is changing. It's being triggered by Drupal's file attachment upload.

I followed the Wiki and went to the rule management area of the GUI, where you can turn the rule off for a Vhost, I added the vhost but it never saves the settings (ie. of turning the rule off).

I tried to disable the rule both locally and server-wide on the command line, and again, various error messages like :-

"asl: error while loading shared libraries: libphp-runtime_u-3.0c.so: cannot open shared object file: No such file or directory"

I would like to either turn the rule off or get the false positive dealt with.

Can anyone help shed any light on how to solve this?

Cheers,
Graeme.

That error means that someone on your system removed part of ASL. That library is part of the ASL control and management system. That error means that the control and management system is not working. ASL has no capability to remove parts of itself, so either someone has removed this library (or package) on your system, or your system has a corrupt filesystem and that library is damaged.

We recommend you re-install ASL as this error is a very serious error, and indicates important parts of ASL have been removed from your system.

You could run 'package-cleanup --problems' (install the yum-utils package first if you don't have that installed) to see if you have any broken RPM dependencies.