ModSecurity

Anyone on this list handle CentOS repos?

From: Ryan Barnett <rbarnett@...>>
Date: Wednesday, January 30, 2013 10:24 AM
To: "mod-security-packagers@...>" <mod-security-packagers@...>>
Subject: ModSecurity v2.7.2 in CentOS Repos

Can someone update the CentOS repos with the ModSecurity v2.7.2 so that it can be installed via Yum?  Looks like v2.6.8 is the latest.

Thanks.

--
Ryan Barnett
Trustwave SpiderLabs
ModSecurity Project Leader
OWASP ModSecurity CRS Project Leader

________________________________

This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.

I do and I will get this done today.

On 02/11/2013 01:02 PM, Ryan Barnett wrote:
> Anyone on this list handle CentOS repos?
>
> From: Ryan Barnett <rbarnett@...
> <mailto:rbarnett@...>>
> Date: Wednesday, January 30, 2013 10:24 AM
> To: "mod-security-packagers@...
> <mailto:mod-security-packagers@...>"
> <mod-security-packagers@...
> <mailto:mod-security-packagers@...>>
> Subject: ModSecurity v2.7.2 in CentOS Repos
>
>     Can someone update the CentOS repos with the ModSecurity v2.7.2 so
>     that it can be installed via Yum?  Looks like v2.6.8 is the latest.
>
>     Thanks.
>
>     -- 
>     Ryan Barnett
>     Trustwave SpiderLabs
>     ModSecurity Project Leader
>     OWASP ModSecurity CRS Project Leader
>

On 02/11/2013 01:02 PM, Ryan Barnett wrote:
> Anyone on this list handle CentOS repos?
>
> From: Ryan Barnett <rbarnett@...
> <mailto:rbarnett@...>>
> Date: Wednesday, January 30, 2013 10:24 AM
> To: "mod-security-packagers@...
> <mailto:mod-security-packagers@...>"
> <mod-security-packagers@...
> <mailto:mod-security-packagers@...>>
> Subject: ModSecurity v2.7.2 in CentOS Repos
>
>     Can someone update the CentOS repos with the ModSecurity v2.7.2 so
>     that it can be installed via Yum?  Looks like v2.6.8 is the latest.
>
>     Thanks.
>
>     -- 
>     Ryan Barnett
>     Trustwave SpiderLabs
>     ModSecurity Project Leader
>     OWASP ModSecurity CRS Project Leader
>

Ryan,

It seems that version 2.7.2 of mod_security requires libxml of at least
2.6.29

I get this when trying to build on CentOS-5 ...

checking if libxml2 is at least v2.6.29... no, 2.6.26
configure: error: NOTE: libxml2 library must be at least 2.6.29
error: Bad exit status from /var/tmp/rpm-tmp.83162 (%build)

Is it possible to use with libxml 2.6.26?  (I can patch the files to
allow it, but will it work?)

If not, I guess 2.6.x will be the last tree that works on CentOS-5.

Thanks,
Johnny Hughes

On 01/30/2013 09:24 AM, Ryan Barnett wrote:
> Can someone update the CentOS repos with the ModSecurity v2.7.2 so
> that it can be installed via Yum?  Looks like v2.6.8 is the latest.
>

The CentOS repository with mod_security is:

http://people.centos.org/hughesjr/mod_security/

It has now be updated to:

CentOS-6:
ModSecurity: 2.7.2
ModSecurity_CRS:  2.2.7

CentOS-5:
ModSecurity: 2.6.8
ModSecurity_CRS:  2.2.7

Note:  The 2.7.x branch of ModSecurity seems to contain a requirement
for libxml2 >= 2.6.29 and the version in CentOS-5 is 2.6.26 ...
therefore, CentOS-5 will have to stay with the 2.6.x branch of ModSecurity.

Thanks,
Johnny Hughes