[mod-security-users] Executing PL2 RCE Rules While Keeping Paranoia Level at PL1

[Brent C. <bre...@gm...>]

Good day Guys

We want to retain PL1 as our overall paranoia level and avoid enabling 
unrelated PL2 rules.

Is it at all possible run / include  rule (i.e id:932239) from 
owasp-modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf

Hope to include the id 932239 in crs-setup.conf,

I'd appreciate any advice or examples from anyone who has implemented 
something similar.

Thanks in advance for your help.

Regards
Brent