forked from pool/apache2-mod_security2
Petr Gajdos
1f5c2cdf32
* Enable optimization for large stream input by default on IIS [Issue #1299 - @victorhora, @zimmerle] * Allow 0 length JSON requests. [Issue #1822 - @allanbomsft, @zimmerle, @victorhora, @marcstern] * Include unanmed JSON values in unnamed ARGS [Issue #1577, #1576 - @marcstern, @victorhora, @zimmerle] * Fix buffer size for utf8toUnicode transformation [Issue #1208 - @katef, @victorhora] * Fix sanitizing JSON request bodies in native audit log format [p0pr0ck5, @victorhora] * IIS: Update Wix installer to bundle a supported CRS version (3.0) [@victorhora, @zimmerle] * IIS: Update dependencies for Windows build [Issue #1848 - @victorhora, @hsluoyz] * IIS: Set SecStreamInBodyInspection by default on IIS builds (#1299) [Issue #1299 - @victorhora] * IIS: Update modsecurity.conf [Issue #788 - @victorhora, @brianclark] * Add sanity check for a couple malloc() and make code more resilient [Issue #979 - @dogbert2, @victorhora, @zimmerl] * Fix NetBSD build by renaming the hmac function to avoid conflicts [Issue #1241 - @victorhora, @joerg, @sevan] * IIS: Windows build, fix duplicate YAJL dir in script [Issue #1612 - @allanbomsft, @victorhora] * IIS: Remove body prebuffering due to no locking in modsecProcessRequest [Issue #1917 - @allanbomsft, @victorhora] * Fix mpm-itk / mod_ruid2 compatibility [Issue #712 - @ju5t , @derhansen, @meatlayer, @victorhora] * Code cosmetics: checks if actionset is not null before use it OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_security2?expand=0&rev=83
132 lines
4.8 KiB
RPMSpec
132 lines
4.8 KiB
RPMSpec
#
|
|
# spec file for package apache2-mod_security2
|
|
#
|
|
# Copyright (c) 2021 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define modname mod_security2
|
|
%define tarballname modsecurity-%{version}
|
|
%define usrsharedir %{_datadir}/%{name}
|
|
Name: apache2-mod_security2
|
|
Version: 2.9.3
|
|
Release: 0
|
|
Summary: Web Application Firewall for apache httpd
|
|
License: Apache-2.0
|
|
Group: Productivity/Networking/Web/Servers
|
|
URL: http://www.modsecurity.org/
|
|
Source: https://www.modsecurity.org/tarball/%{version}/%{tarballname}.tar.gz
|
|
Source1: https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/master//SpiderLabs-owasp-modsecurity-crs-2.2.9-5-gebe8790.tar.gz
|
|
Source2: mod_security2.conf
|
|
Source6: README-SUSE-mod_security2.txt
|
|
Source7: empty.conf
|
|
Patch0: apache2-mod_security2-no_rpath.diff
|
|
Patch1: modsecurity-fixes.patch
|
|
Patch2: apache2-mod_security2_tests_conf.patch
|
|
# https://github.com/SpiderLabs/ModSecurity/issues/2514
|
|
Patch3: modsecurity-2.9.3-input_filtering_errors.patch
|
|
BuildRequires: apache-rpm-macros
|
|
BuildRequires: apache2-devel
|
|
BuildRequires: apache2-prefork
|
|
BuildRequires: autoconf
|
|
BuildRequires: automake
|
|
BuildRequires: c++_compiler
|
|
BuildRequires: libcurl-devel
|
|
BuildRequires: libtool
|
|
BuildRequires: libxml2-devel
|
|
BuildRequires: lua53-devel
|
|
BuildRequires: pcre-devel
|
|
BuildRequires: perl-libwww-perl
|
|
BuildRequires: pkgconfig
|
|
Requires: %{apache_mmn}
|
|
Requires: %{apache_suse_maintenance_mmn}
|
|
Requires: apache2
|
|
%if 0%{suse_version} == 1110
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
%endif
|
|
|
|
%description
|
|
ModSecurity is an intrusion detection and prevention
|
|
engine for web applications (or a web application firewall). Operating
|
|
as an Apache Web server module or standalone, the purpose of
|
|
ModSecurity is to increase web application security, protecting web
|
|
applications from known and unknown attacks.
|
|
|
|
%prep
|
|
%setup -q -n %{tarballname}
|
|
%setup -q -D -T -a 1 -n %{tarballname}
|
|
mv -v SpiderLabs* rules
|
|
%patch0
|
|
%patch1 -p1
|
|
%patch2 -p1
|
|
%patch3 -p1
|
|
|
|
%build
|
|
# aclocal only works with newer distributions
|
|
%if 0%{?suse_version} >= 1310
|
|
aclocal
|
|
# on older versions only autoconf is called
|
|
%else
|
|
autoreconf -fi
|
|
%endif
|
|
automake
|
|
%configure --with-apxs=%{apache_apxs} --enable-request-early --enable-htaccess-config --disable-mlogc
|
|
CFLAGS="%{optflags}" make %{?_smp_mflags}
|
|
|
|
%install
|
|
pushd apache2
|
|
install -d -m 0755 %{buildroot}%{apache_libexecdir}
|
|
install .libs/mod_security2.so %{buildroot}%{apache_libexecdir}/%{modname}.so
|
|
popd
|
|
install -D -m 0644 %{SOURCE2} %{buildroot}%{apache_sysconfdir}/conf.d/%{modname}.conf
|
|
install -d -m 0755 %{buildroot}%{apache_sysconfdir}/mod_security2.d
|
|
install -D -m 0644 %{SOURCE6} %{buildroot}%{apache_sysconfdir}/mod_security2.d
|
|
install -D -m 0644 %{SOURCE7} %{buildroot}%{apache_sysconfdir}/mod_security2.d
|
|
cp -a %{SOURCE6} doc
|
|
install -d -m 0755 %{buildroot}/%{usrsharedir}
|
|
install -d -m 0755 %{buildroot}/%{usrsharedir}/tools
|
|
rm -f rules/.gitignore rules/LICENSE
|
|
cp -a rules/util/README %{buildroot}/%{usrsharedir}/tools/README-rules-updater.txt
|
|
cp -a tools/rules-updater.pl tools/rules-updater-example.conf %{buildroot}/%{usrsharedir}/tools
|
|
find rules -type f -exec chmod 644 {} +
|
|
cp -a rules %{buildroot}/%{usrsharedir}
|
|
rm -rf %{buildroot}/%{usrsharedir}/rules/util
|
|
rm -rf %{buildroot}/%{usrsharedir}/rules/lua
|
|
rm -f %{buildroot}/%{usrsharedir}/rules/READM*
|
|
rm -f %{buildroot}/%{usrsharedir}/rules/INSTALL %{buildroot}/%{usrsharedir}/rules/CHANGELOG
|
|
mv %{buildroot}/%{usrsharedir}/rules/modsecurity_crs_10_setup.conf.example \
|
|
%{buildroot}/%{usrsharedir}/rules/modsecurity_crs_10_setup.conf
|
|
|
|
# Temporarily disable test suite as there are some failures that need to be solved
|
|
#%check
|
|
#make test
|
|
#make test-regression
|
|
|
|
%files
|
|
%if %{suse_version} == 1110
|
|
%defattr (-,root,root)
|
|
%endif
|
|
%{apache_libexecdir}/%{modname}.so
|
|
%config(noreplace) %{apache_sysconfdir}/conf.d/%{modname}.conf
|
|
%dir %{apache_sysconfdir}/mod_security2.d
|
|
%{apache_sysconfdir}/mod_security2.d/README-SUSE-mod_security2.txt
|
|
%{apache_sysconfdir}/mod_security2.d/empty.conf
|
|
%{usrsharedir}
|
|
%doc README.md CHANGES LICENSE NOTICE authors.txt
|
|
%doc doc/README.txt
|
|
%doc doc/README-SUSE-mod_security2.txt
|
|
%doc rules/util/regression-tests
|
|
|
|
%changelog
|