{"id":1944,"date":"2013-03-13T10:23:30","date_gmt":"2013-03-13T02:23:30","guid":{"rendered":"http:\/\/rmohan.com\/?p=1944"},"modified":"2013-03-13T10:35:39","modified_gmt":"2013-03-13T02:35:39","slug":"install-the-modsecurity-centos-fedora-redhat","status":"publish","type":"post","link":"https:\/\/mohan.sg\/?p=1944","title":{"rendered":"Install the (ModSecurity) centos fedora redhat"},"content":{"rendered":"<p>Install the (ModSecurity)<\/p>\n<p>cd \/usr\/local\/src\/<\/p>\n<p>wget <a href=\"http:\/\/www.modsecurity.org\/tarball\/2.7.2\/modsecurity-apache_2.7.2.tar.gz\">http:\/\/www.modsecurity.org\/tarball\/2.7.2\/modsecurity-apache_2.7.2.tar.gz<\/a><\/p>\n<p>tar -zxvf modsecurity-apache_2.7.2.tar.gz<\/p>\n<p>cd\u00a0 modsecurity-apache_2.7.2<\/p>\n<p>.\/configure<\/p>\n<p>configure: *** pcre library not found.<br \/>configure: error: pcre library is required<\/p>\n<p>&nbsp;<\/p>\n<p>yum -y update pcre<\/p>\n<p>additional package dependencies.<br \/>yum -y install\u00a0 pcre-devel<br \/>yum -y install\u00a0 libxml2<br \/>yum -y install\u00a0 libxml2-devel<\/p>\n<p>mod_unique_id need to use mod_security<\/p>\n<p>cd \/software\/httpd-2.24\/modules\/metadata<\/p>\n<p>\/Usr\/local\/apache2\/bin\/apxs -cia Mod_unique_id.C<\/p>\n<p>cd \/software\/httpd-2.24\/Srclib\/apr<br \/>.\/configure<br \/>make<br \/>make install<\/p>\n<p>cd \/software\/httpd-2.24\/Srclib\/apr-util<\/p>\n<p>.\/configure -with-apr=\/usr\/local\/apr\/bin\/apr-1-config<\/p>\n<p>make <br \/>make install<\/p>\n<p>&nbsp;<\/p>\n<p>Recomplie apache for PCRE APR APR-UTI<\/p>\n<p>cd \/software\/httpd-2.24<\/p>\n<p>make clean<\/p>\n<p>\/configure &#8211;enable-so \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;enable-rewrite \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;enable-mods-shared=&#8221;unique_id&#8221; \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;with-pcre \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;with-apr=\/usr\/local\/apr\/bin\/apr-1-config \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;with-apr-util=\/usr\/local\/apr\/bin\/apu-1-config \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;prefix=\/usr\/local\/apache2<br \/>make<br \/>make install<\/p>\n<p>&nbsp;<\/p>\n<p>Install Mod security <br \/>cd \/usr\/local\/src\/<\/p>\n<p>cd\u00a0 modsecurity-apache_2.7.2<\/p>\n<p>make clean<\/p>\n<p>.\/configure \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;prefix=\/usr\/local\/apache2 \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;with-apxs=\/usr\/local\/apache2\/bin\/apxs \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;with-apr=\/usr\/local\/apache2\/bin\/apr-1-config \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;with-apu=\/usr\/local\/apache2\/bin\/apu-1-config \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;with-pcre=\/usr\/bin\/pcre-config \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8211;with-libxml=\/usr\/bin\/xml2-config \\<br \/>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LDFLAGS=-L\/usr\/local\/apache2\/lib<br \/>make<br \/>make install<\/p>\n<p>&nbsp;<\/p>\n<p>mkdir \/var\/modsecurity\/<br \/>mkdir \/var\/modsecurity\/data<br \/>mkdir \/var\/modsecurity\/tmp<br \/>mkdir \/var\/modsecurity\/upload<br \/>chown root:apache \/var\/modsecurity<br \/>chown apache:root \/var\/modsecurity\/data<br \/>chown apache:apache \/var\/modsecurity\/tmp<br \/>chown apache:root \/var\/modsecurity\/upload\/<br \/>chmod 750 \/var\/modsecurity<br \/>chmod 700 \/var\/modsecurity\/data<br \/>chmod 750 \/var\/modsecurity\/tmp<br \/>chmod 700 \/var\/modsecurity\/upload<\/p>\n<p>cd \/usr\/local\/src<\/p>\n<p>wget <a href=\"https:\/\/github.com\/SpiderLabs\/owasp-modsecurity-crs\/tarball\/master\">https:\/\/github.com\/SpiderLabs\/owasp-modsecurity-crs\/tarball\/master<\/a><\/p>\n<p>tar xvfz SpiderLabs-owasp-modsecurity-crs-2.2.7-13-g40b2c75.tar.gz<\/p>\n<p>mkdir \/usr\/local\/apache2\/crs<\/p>\n<p>cd \/usr\/local\/apache2\/crs<br \/>cp modsecurity_crs_10_setup.conf.example modsecurity_crs_10_config.conf<br \/>vi modsecurity_crs_10_config.conf<\/p>\n<p>SecRuleEngine On<br \/># SecRequestBodyAccess<br \/>SecRequestBodyAccess On<br \/>SecResponseBodyAccess Off<br \/># SecRequestBodyLimit <br \/>SecRequestBodyLimit 5242880<br \/># SecRequestBodyNoFilesLimit <br \/>SecRequestBodyNoFilesLimit 51200<br \/>SecAuditEngine RelevantOnly<br \/>SecAuditLogRelevantStatus &#8220;^(?:5|4(?!04))&#8221;<br \/>SecAuditLogType Serial<br \/>SecAuditLog logs\/modsec_audit.log<br \/>SecAuditLogParts &#8220;ABIFHKZ&#8221;<br \/>SecDebugLog\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 logs\/modsec_debug.log<br \/>SecDebugLogLevel\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 3<br \/>SecDataDir\u00a0\u00a0\u00a0\u00a0\u00a0 \/var\/modsecurity\/data\/<br \/>SecTmpDir\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/var\/modsecurity\/tmp\/<br \/>SecUploadDir\u00a0\u00a0\u00a0 \/var\/modsecurity\/upload\/<\/p>\n<p>vi \/usr\/local\/apache2\/conf\/extra\/httpd-modsecurity.conf<\/p>\n<p>LoadModule unique_id_module modules\/mod_unique_id.so<br \/>LoadModule security2_module modules\/mod_security2.so<br \/>\u00a0<br \/>Include crs\/modsecurity_crs_10_config.conf<br \/>Include crs\/base_rules\/*.conf<\/p>\n<p>apache stop and start<\/p>\n<p>\/usr\/local\/apache2\/bin\/apachectl stop <br \/>\/usr\/local\/apache2\/bin\/apachectl\u00a0 start<\/p>\n<p>\/usr\/local\/apache2\/bin\/apachectl -M<\/p>\n<p>tail -f \/usr\/local\/apache2\/log\/error.log<\/p>\n<p>\u00a0ModSecurity for Apache\/2.2.4 (<a href=\"http:\/\/www.modsecurity.org\/\">http:\/\/www.modsecurity.org\/<\/a>) configured.<br \/>\u00a0ModSecurity: APR compiled version=&#8221;1.4.5&#8243;; loaded version=&#8221;1.4.5&#8243;<br \/>\u00a0ModSecurity: PCRE compiled version=&#8221;8.31 &#8220;; loaded version=&#8221;5.0 13-Sep-2004&#8221;<br \/>\u00a0ModSecurity: Loaded PCRE do not match with compiled!<br \/>\u00a0ModSecurity: LIBXML compiled version=&#8221;2.8.0&#8243;<br \/>\u00a0Apache\/2.2.4 (Linux) CovalentSNMP\/3.0.3 configured &#8212; resuming normal operations<br \/>\u00a0SNMP: CovalentSNMP\/3.0.3 started (user &#8216;106&#8217; &#8211; SNMP address &#8216;1610&#8217; &#8211; pid &#8216;7<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Install the (ModSecurity)<\/p>\n<p>cd \/usr\/local\/src\/<\/p>\n<p>wget http:\/\/www.modsecurity.org\/tarball\/2.7.2\/modsecurity-apache_2.7.2.tar.gz<\/p>\n<p>tar -zxvf modsecurity-apache_2.7.2.tar.gz<\/p>\n<p>cd modsecurity-apache_2.7.2<\/p>\n<p>.\/configure<\/p>\n<p>configure: *** pcre library not found.configure: error: pcre library is required<\/p>\n<p>&nbsp;<\/p>\n<p>yum -y update pcre<\/p>\n<p>additional package dependencies.yum -y install pcre-develyum -y install libxml2yum -y install libxml2-devel<\/p>\n<p>mod_unique_id need to use mod_security<\/p>\n<p>cd \/software\/httpd-2.24\/modules\/metadata<\/p>\n<p>\/Usr\/local\/apache2\/bin\/apxs -cia Mod_unique_id.C<\/p>\n<p>cd \/software\/httpd-2.24\/Srclib\/apr.\/configuremakemake install<\/p>\n<p>cd [&#8230;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/1944"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1944"}],"version-history":[{"count":3,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/1944\/revisions"}],"predecessor-version":[{"id":1946,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/1944\/revisions\/1946"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1944"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1944"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1944"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}