2008-09-24 15:02:28 +02:00
|
|
|
#
|
2012-08-27 15:45:37 +02:00
|
|
|
# spec file for package apache2-mod_security2
|
2008-09-24 15:02:28 +02:00
|
|
|
#
|
2014-03-19 11:06:20 +01:00
|
|
|
# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
2008-09-24 15:02:28 +02:00
|
|
|
#
|
|
|
|
|
# All modifications and additions to the file contributed by third parties
|
|
|
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
|
|
|
# upon. The license for this file, and modifications and additions to the
|
|
|
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
|
|
|
# license for the pristine package is not an Open Source License, in which
|
|
|
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
|
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
|
|
|
# published by the Open Source Initiative.
|
|
|
|
|
|
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
|
2014-11-11 13:00:42 +01:00
|
|
|
%define modname mod_security2
|
|
|
|
|
%define tarballname modsecurity-%{version}
|
|
|
|
|
#
|
|
|
|
|
%define usrsharedir %{_datadir}/%{name}
|
|
|
|
|
%define refman Reference-Manual.html
|
|
|
|
|
%define faq ModSecurity-Frequently-Asked-Questions-FAQ.html
|
2008-09-24 15:02:28 +02:00
|
|
|
Name: apache2-mod_security2
|
2014-05-01 21:12:22 +02:00
|
|
|
Version: 2.8.0
|
2014-11-11 13:00:42 +01:00
|
|
|
Release: 0
|
2008-09-24 15:02:28 +02:00
|
|
|
#
|
2014-11-11 13:00:42 +01:00
|
|
|
Summary: ModSecurity Open Source Web Application Firewall
|
|
|
|
|
License: Apache-2.0
|
|
|
|
|
Group: Productivity/Networking/Web/Servers
|
2008-09-24 15:02:28 +02:00
|
|
|
#
|
2014-11-11 13:00:42 +01:00
|
|
|
Url: http://www.modsecurity.org/
|
|
|
|
|
Source: https://www.modsecurity.org/tarball/%{version}/%{tarballname}.tar.gz
|
|
|
|
|
Source1: https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/master//SpiderLabs-owasp-modsecurity-crs-2.2.9-5-gebe8790.tar.gz
|
|
|
|
|
Source2: mod_security2.conf
|
|
|
|
|
Source3: %{refman}.bz2
|
|
|
|
|
Source4: %{faq}.bz2
|
|
|
|
|
Source5: modsecurity_diagram_apache_request_cycle.jpg
|
|
|
|
|
Source6: README-SUSE-mod_security2.txt
|
|
|
|
|
Source7: empty.conf
|
|
|
|
|
Patch0: apache2-mod_security2-no_rpath.diff
|
|
|
|
|
BuildRequires: apache-rpm-macros
|
2012-08-27 15:45:37 +02:00
|
|
|
BuildRequires: apache2-devel
|
|
|
|
|
BuildRequires: apache2-prefork
|
2014-06-16 17:37:59 +02:00
|
|
|
BuildRequires: autoconf
|
|
|
|
|
BuildRequires: automake
|
2012-08-27 15:45:37 +02:00
|
|
|
BuildRequires: c++_compiler
|
2014-06-16 17:37:59 +02:00
|
|
|
BuildRequires: libcurl-devel
|
2014-06-16 19:03:44 +02:00
|
|
|
BuildRequires: libtool
|
2012-08-27 15:45:37 +02:00
|
|
|
BuildRequires: libxml2-devel
|
2014-06-16 17:37:59 +02:00
|
|
|
BuildRequires: lua-devel
|
2012-08-27 15:45:37 +02:00
|
|
|
BuildRequires: pcre-devel
|
|
|
|
|
Requires: %{apache_mmn}
|
|
|
|
|
Requires: apache2
|
2008-09-24 15:02:28 +02:00
|
|
|
#
|
|
|
|
|
#
|
2014-11-11 13:00:42 +01:00
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
2008-09-24 15:02:28 +02:00
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
ModSecurity(TM) is an open source intrusion detection and prevention
|
|
|
|
|
engine for web applications (or a web application firewall). Operating
|
|
|
|
|
as an Apache Web server module or standalone, the purpose of
|
|
|
|
|
ModSecurity is to increase web application security, protecting web
|
|
|
|
|
applications from known and unknown attacks.
|
|
|
|
|
|
Accepting request 206042 from home:draht:branches:Apache:Modules
- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
/etc/apache2/conf.d/mod_security2.conf loads
/usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
then /etc/apache2/mod_security2.d/*.conf , as set up based on
advice in /etc/apache2/conf.d/mod_security2.conf
Your configuration starting point is
/etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
* CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
* [bnc#768293] multi-part bypass, minor threat
* CVE-2013-1915 [bnc#813190] XML external entity vulnerability
* CVE-2012-4528 [bnc#789393] rule bypass
* CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
* GPLv2 replaced by Apache License v2
* rules are not part of the source tarball any longer, but
maintaned upstream externally, and included in this package.
* documentation was externalized to a wiki. Package contains
the FAQ and the reference manual in html form.
* renamed the term "Encryption" in directives that actually refer
to hashes. See CHANGES file for more details.
* new directive SecXmlExternalEntity, default off
* byte conversion issues on s390x when logging fixed.
* many small issues fixed that were discovered by a Coverity scanner
* updated reference manual
OBS-URL: https://build.opensuse.org/request/show/206042
OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=42
2013-11-07 00:16:14 +01:00
|
|
|
The modsecurity team also offer a commercial version of their excellent
|
|
|
|
|
ruleset. Please have a look at http://www.modsecurity.org/ for more details.
|
2008-09-24 15:02:28 +02:00
|
|
|
|
|
|
|
|
%prep
|
2014-11-11 13:00:42 +01:00
|
|
|
%setup -q -n %{tarballname}
|
|
|
|
|
%setup -q -D -T -a 1 -n %{tarballname}
|
Accepting request 206042 from home:draht:branches:Apache:Modules
- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
/etc/apache2/conf.d/mod_security2.conf loads
/usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
then /etc/apache2/mod_security2.d/*.conf , as set up based on
advice in /etc/apache2/conf.d/mod_security2.conf
Your configuration starting point is
/etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
* CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
* [bnc#768293] multi-part bypass, minor threat
* CVE-2013-1915 [bnc#813190] XML external entity vulnerability
* CVE-2012-4528 [bnc#789393] rule bypass
* CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
* GPLv2 replaced by Apache License v2
* rules are not part of the source tarball any longer, but
maintaned upstream externally, and included in this package.
* documentation was externalized to a wiki. Package contains
the FAQ and the reference manual in html form.
* renamed the term "Encryption" in directives that actually refer
to hashes. See CHANGES file for more details.
* new directive SecXmlExternalEntity, default off
* byte conversion issues on s390x when logging fixed.
* many small issues fixed that were discovered by a Coverity scanner
* updated reference manual
OBS-URL: https://build.opensuse.org/request/show/206042
OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=42
2013-11-07 00:16:14 +01:00
|
|
|
mv -v SpiderLabs* rules
|
|
|
|
|
bzip2 -dc %{SOURCE3} > %{_sourcedir}/%{refman} && touch -r %{SOURCE3} %{_sourcedir}/%{refman}
|
|
|
|
|
bzip2 -dc %{SOURCE4} > %{_sourcedir}/%{faq} && touch -r %{SOURCE4} %{_sourcedir}/%{faq}
|
2014-06-16 17:37:59 +02:00
|
|
|
%patch0
|
|
|
|
|
#%patch1
|
|
|
|
|
#%patch2
|
2008-09-24 15:02:28 +02:00
|
|
|
|
|
|
|
|
%build
|
2014-08-27 17:27:01 +02:00
|
|
|
# aclocal only works with never distributions,
|
|
|
|
|
%if 0%{?suse_version} >= 1310
|
2014-06-16 17:37:59 +02:00
|
|
|
aclocal
|
2014-08-27 17:27:01 +02:00
|
|
|
# on older versions only autoconf is called.
|
|
|
|
|
%else
|
|
|
|
|
autoreconf -fi
|
|
|
|
|
%endif
|
2014-06-16 17:37:59 +02:00
|
|
|
automake
|
2014-11-11 13:00:42 +01:00
|
|
|
./configure --with-apxs=%{apache_apxs} --enable-request-early --enable-htaccess-config
|
2014-06-16 17:37:59 +02:00
|
|
|
CFLAGS="%{optflags}" make %{?_smp_mflags}
|
2008-09-24 15:02:28 +02:00
|
|
|
|
|
|
|
|
%install
|
2014-11-11 13:00:42 +01:00
|
|
|
pushd apache2
|
Accepting request 206042 from home:draht:branches:Apache:Modules
- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
/etc/apache2/conf.d/mod_security2.conf loads
/usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
then /etc/apache2/mod_security2.d/*.conf , as set up based on
advice in /etc/apache2/conf.d/mod_security2.conf
Your configuration starting point is
/etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
* CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
* [bnc#768293] multi-part bypass, minor threat
* CVE-2013-1915 [bnc#813190] XML external entity vulnerability
* CVE-2012-4528 [bnc#789393] rule bypass
* CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
* GPLv2 replaced by Apache License v2
* rules are not part of the source tarball any longer, but
maintaned upstream externally, and included in this package.
* documentation was externalized to a wiki. Package contains
the FAQ and the reference manual in html form.
* renamed the term "Encryption" in directives that actually refer
to hashes. See CHANGES file for more details.
* new directive SecXmlExternalEntity, default off
* byte conversion issues on s390x when logging fixed.
* many small issues fixed that were discovered by a Coverity scanner
* updated reference manual
OBS-URL: https://build.opensuse.org/request/show/206042
OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=42
2013-11-07 00:16:14 +01:00
|
|
|
install -d -m 0755 %{buildroot}%{apache_libexecdir}
|
2014-06-16 17:37:59 +02:00
|
|
|
install .libs/mod_security2.so %{buildroot}%{apache_libexecdir}/%{modname}.so
|
2008-09-24 15:02:28 +02:00
|
|
|
popd
|
Accepting request 206042 from home:draht:branches:Apache:Modules
- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
/etc/apache2/conf.d/mod_security2.conf loads
/usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
then /etc/apache2/mod_security2.d/*.conf , as set up based on
advice in /etc/apache2/conf.d/mod_security2.conf
Your configuration starting point is
/etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
* CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
* [bnc#768293] multi-part bypass, minor threat
* CVE-2013-1915 [bnc#813190] XML external entity vulnerability
* CVE-2012-4528 [bnc#789393] rule bypass
* CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
* GPLv2 replaced by Apache License v2
* rules are not part of the source tarball any longer, but
maintaned upstream externally, and included in this package.
* documentation was externalized to a wiki. Package contains
the FAQ and the reference manual in html form.
* renamed the term "Encryption" in directives that actually refer
to hashes. See CHANGES file for more details.
* new directive SecXmlExternalEntity, default off
* byte conversion issues on s390x when logging fixed.
* many small issues fixed that were discovered by a Coverity scanner
* updated reference manual
OBS-URL: https://build.opensuse.org/request/show/206042
OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=42
2013-11-07 00:16:14 +01:00
|
|
|
install -D -m 0644 %{SOURCE2} %{buildroot}%{apache_sysconfdir}/conf.d/%{modname}.conf
|
|
|
|
|
install -d -m 0755 %{buildroot}%{apache_sysconfdir}/mod_security2.d
|
|
|
|
|
install -D -m 0644 %{SOURCE6} %{buildroot}%{apache_sysconfdir}/mod_security2.d
|
2014-08-27 18:32:34 +02:00
|
|
|
install -D -m 0644 %{SOURCE7} %{buildroot}%{apache_sysconfdir}/mod_security2.d
|
Accepting request 206042 from home:draht:branches:Apache:Modules
- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
/etc/apache2/conf.d/mod_security2.conf loads
/usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
then /etc/apache2/mod_security2.d/*.conf , as set up based on
advice in /etc/apache2/conf.d/mod_security2.conf
Your configuration starting point is
/etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
* CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
* [bnc#768293] multi-part bypass, minor threat
* CVE-2013-1915 [bnc#813190] XML external entity vulnerability
* CVE-2012-4528 [bnc#789393] rule bypass
* CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
* GPLv2 replaced by Apache License v2
* rules are not part of the source tarball any longer, but
maintaned upstream externally, and included in this package.
* documentation was externalized to a wiki. Package contains
the FAQ and the reference manual in html form.
* renamed the term "Encryption" in directives that actually refer
to hashes. See CHANGES file for more details.
* new directive SecXmlExternalEntity, default off
* byte conversion issues on s390x when logging fixed.
* many small issues fixed that were discovered by a Coverity scanner
* updated reference manual
OBS-URL: https://build.opensuse.org/request/show/206042
OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=42
2013-11-07 00:16:14 +01:00
|
|
|
cp -a %{SOURCE6} doc
|
|
|
|
|
install -m 0644 %{_sourcedir}/%{faq} %{_sourcedir}/%{refman} doc
|
|
|
|
|
install -m 0644 %{SOURCE5} doc
|
|
|
|
|
install -d -m 0755 %{buildroot}/%{usrsharedir}
|
|
|
|
|
install -d -m 0755 %{buildroot}/%{usrsharedir}/tools
|
|
|
|
|
install -d -m 0755 %{buildroot}/%{usrsharedir}
|
|
|
|
|
rm -f rules/.gitignore rules/LICENSE
|
|
|
|
|
cp -a rules/util/README %{buildroot}/%{usrsharedir}/tools/README-rules-updater.txt
|
|
|
|
|
cp -a tools/rules-updater.pl tools/rules-updater-example.conf %{buildroot}/%{usrsharedir}/tools
|
|
|
|
|
find rules -type f -print0 | \
|
|
|
|
|
xargs -0 chmod 644
|
|
|
|
|
cp -a rules %{buildroot}/%{usrsharedir}
|
|
|
|
|
rm -rf %{buildroot}/%{usrsharedir}/rules/util
|
|
|
|
|
rm -rf %{buildroot}/%{usrsharedir}/rules/lua
|
|
|
|
|
rm -f %{buildroot}/%{usrsharedir}/rules/READM*
|
|
|
|
|
rm -f %{buildroot}/%{usrsharedir}/rules/INSTALL %{buildroot}/%{usrsharedir}/rules/CHANGELOG
|
|
|
|
|
mv %{buildroot}/%{usrsharedir}/rules/modsecurity_crs_10_setup.conf.example \
|
|
|
|
|
%{buildroot}/%{usrsharedir}/rules/modsecurity_crs_10_setup.conf
|
|
|
|
|
|
2008-09-24 15:02:28 +02:00
|
|
|
%files
|
|
|
|
|
%defattr(-, root, root, 0755)
|
|
|
|
|
%{apache_libexecdir}/%{modname}.so
|
|
|
|
|
%config(noreplace) %{apache_sysconfdir}/conf.d/%{modname}.conf
|
Accepting request 206042 from home:draht:branches:Apache:Modules
- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
/etc/apache2/conf.d/mod_security2.conf loads
/usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
then /etc/apache2/mod_security2.d/*.conf , as set up based on
advice in /etc/apache2/conf.d/mod_security2.conf
Your configuration starting point is
/etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
* CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
* [bnc#768293] multi-part bypass, minor threat
* CVE-2013-1915 [bnc#813190] XML external entity vulnerability
* CVE-2012-4528 [bnc#789393] rule bypass
* CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
* GPLv2 replaced by Apache License v2
* rules are not part of the source tarball any longer, but
maintaned upstream externally, and included in this package.
* documentation was externalized to a wiki. Package contains
the FAQ and the reference manual in html form.
* renamed the term "Encryption" in directives that actually refer
to hashes. See CHANGES file for more details.
* new directive SecXmlExternalEntity, default off
* byte conversion issues on s390x when logging fixed.
* many small issues fixed that were discovered by a Coverity scanner
* updated reference manual
OBS-URL: https://build.opensuse.org/request/show/206042
OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=42
2013-11-07 00:16:14 +01:00
|
|
|
%dir %{apache_sysconfdir}/mod_security2.d
|
|
|
|
|
%{apache_sysconfdir}/mod_security2.d/README-SUSE-mod_security2.txt
|
2014-08-27 17:32:56 +02:00
|
|
|
%{apache_sysconfdir}/mod_security2.d/empty.conf
|
Accepting request 206042 from home:draht:branches:Apache:Modules
- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
/etc/apache2/conf.d/mod_security2.conf loads
/usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
then /etc/apache2/mod_security2.d/*.conf , as set up based on
advice in /etc/apache2/conf.d/mod_security2.conf
Your configuration starting point is
/etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
* CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
* [bnc#768293] multi-part bypass, minor threat
* CVE-2013-1915 [bnc#813190] XML external entity vulnerability
* CVE-2012-4528 [bnc#789393] rule bypass
* CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
* GPLv2 replaced by Apache License v2
* rules are not part of the source tarball any longer, but
maintaned upstream externally, and included in this package.
* documentation was externalized to a wiki. Package contains
the FAQ and the reference manual in html form.
* renamed the term "Encryption" in directives that actually refer
to hashes. See CHANGES file for more details.
* new directive SecXmlExternalEntity, default off
* byte conversion issues on s390x when logging fixed.
* many small issues fixed that were discovered by a Coverity scanner
* updated reference manual
OBS-URL: https://build.opensuse.org/request/show/206042
OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=42
2013-11-07 00:16:14 +01:00
|
|
|
%dir %{usrsharedir}
|
|
|
|
|
#%dir %{usrsharedir}/tools
|
|
|
|
|
#%dir %{usrsharedir}/rules
|
|
|
|
|
%doc README.TXT CHANGES LICENSE NOTICE authors.txt
|
|
|
|
|
%{usrsharedir}
|
|
|
|
|
#%{usrsharedir}/rules/activated_rules
|
|
|
|
|
#%{usrsharedir}/rules/base_rules
|
|
|
|
|
#%{usrsharedir}/rules/experimental_rules
|
|
|
|
|
#%{usrsharedir}/rules/optional_rules
|
|
|
|
|
#%{usrsharedir}/rules/slr_rules
|
2014-06-16 17:37:59 +02:00
|
|
|
%doc doc/* rules/util/regression-tests
|
2008-09-24 15:02:28 +02:00
|
|
|
|
|
|
|
|
%changelog
|
