Re: [Mod-security-developers] Antwort: Re: compile modsecurity --with-curl=no

[Felipe C. <FC...@tr...>]

Hi Christian,

It is natural that you cannot build the mlogc without the curl dependency,
as it is a mandatory dependency.

I will try to investigate the semaphore issue. Meanwhile, you may want to
manually cleanup the semaphores. Here is what we use on our buildbots:
https://gist.github.com/zimmerle/f4fd10f9b0485abb4872


Br.,
Felipe ³Zimmerle² Costa
Security Researcher, SpiderLabs

Trustwave | SMART SECURITY ON DEMAND
www.trustwave.com <http://www.trustwave.com/>





From:  "chr...@go..."
<chr...@go...>
Reply-To:  "mod...@li..."
<mod...@li...>
Date:  Monday, November 16, 2015 at 11:21 AM
To:  "mod...@li..."
<mod...@li...>
Subject:  [Mod-security-developers] Antwort: Re: compile
modsecurity     --with-curl=no


Hi Felipe,

my question is related to the semaphore issue:
https://sourceforge.net/p/mod-security/mailman/message/34613832/
<http://scanmail.trustwave.com/?c=4062&d=uOfJ1hIm5YUCSUxW9Ytptg5Hx0tKkdky-0
YSeK_kkw&s=5&u=https%3a%2f%2fsourceforge%2enet%2fp%2fmod-security%2fmailman
%2fmessage%2f34613832%2f>

No, I didn't manage to compile mlogc using "--with-curl=no". The mlogc
binary will simply not be build.
Anyway, building mlogc without curl is no longer important to me. The
basic problem is the semphore issue.

I would be very grateful, if the semaphore problem could be addressed.
It's seems like many others have the same issue.
Maybe you get some idea how to figure out the problem, if you read my post
about the semaphore issue.

Best regards,
Christian




Von:        Felipe Costa <FC...@tr...>
An:        "mod...@li..."
<mod...@li...>
Datum:        13.11.2015 22:40
Betreff:        Re: [Mod-security-developers] compile modsecurity
--with-curl=no
________________________________________



Hi Christian,

Mlogc depends on curl to submit the logs to the target host. Did you
managed to compile the mlogc while using --with-curl=no ?

Br.,
Felipe ³Zimmerle² Costa

Security Researcher, SpiderLabs

Trustwave| SMART SECURITY ON DEMAND
www.trustwave.com <http://www.trustwave.com/>

From: "chr...@go..."
<chr...@go...>
Reply-To: "mod...@li..."
<mod...@li...>
Date: Monday, November 2, 2015 at 8:34 AM
To: "mod...@li..."
<mod...@li...>
Subject: [Mod-security-developers] compile modsecurity --with-curl=no

Dear devolopers,

I searched the mailing lists and google for my question, but didn't find
anything. Hopefully this is the right place to ask my question.


We use a modified apache httpd (2.2.29) with modsecurity 2.9.0 on RHEL 6.6
(64bit). On graceful restarts of the httpd the number semaphore arrays
start to increase till they reach the limit of 128 when mlogc is enabled.
The support of the modified httpd suggested
 to compile modsecurity "--with-curl=no". The number of semaphore arrays
is not encreasing anymore.

Now my question is which impact will this option have on modsecurity/mlogc?

Thanks in advance,
Christian
___________________________________________________________________________
_________________________
Gesellschaft: Gothaer Systems GmbH
Sitz: Gothaer Allee 1, 50969 Köln (Hausanschrift)
Aufsichtsrat: Dr. Mathias Bühring-Uhle (Vorsitzender)
Geschäftsführung: Dr. Hans Volkmar Weckesser (Vorsitzender), Hans Berg
Rechtsform: Gesellschaft mit beschränkter Haftung
Registergericht: Amtsgericht Köln, HRB 25642
USt.-IdNr. DE811850000


________________________________________

This transmission may contain information that is privileged,
confidential, and/or exempt from disclosure under applicable law. If you
are not the intended recipient, you are hereby notified that any
disclosure, copying, distribution, or use of the information
 contained herein (including any reliance thereon) is strictly prohibited.
If you received this transmission in error, please immediately contact the
sender and destroy the material in its entirety, whether in electronic or
hard copy
format.--------------------------------------------------------------------
----------
_______________________________________________
mod-security-developers mailing list
mod...@li...
https://lists.sourceforge.net/lists/listinfo/mod-security-developers
<http://scanmail.trustwave.com/?c=4062&d=uefJ1iK4wZfAPkX8TQkCvTNjrOelkAkMds
B7bRZKBA&s=5&u=https%3a%2f%2flists%2esourceforge%2enet%2flists%2flistinfo%2
fmod-security-developers>
ModSecurity Services from Trustwave's SpiderLabs:
https://www.trustwave.com/spiderLabs.php


___________________________________________________________________________
_________________________
Gesellschaft: Gothaer Systems GmbH
Sitz: Gothaer Allee 1, 50969 Köln (Hausanschrift)
Aufsichtsrat: Dr. Mathias Bühring-Uhle (Vorsitzender)
Geschäftsführung: Dr. Hans Volkmar Weckesser (Vorsitzender), Hans Berg
Rechtsform: Gesellschaft mit beschränkter Haftung
Registergericht: Amtsgericht Köln, HRB 25642
USt.-IdNr. DE811850000


________________________________

This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is strictly prohibited. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.