Re: [mod-security-users] Modsec on Tiger?

[Ivan R. <iv...@we...>]

li...@32... wrote:
> 
> Hello,
> 
> I upgraded my server from Mac OS X 10.3 (panther) to 10.4.4(tiger).
> 
> I attempted to install modsecurity 1.9.2 and it will not work.
> 
> Here is what is returned when I install it...
> 
> 
> t# apxs -cia mod_security.c
> gcc -DDARWIN -DUSE_HSREGEX -DUSE_EXPAT -I../lib/expat-lite -g -Os -pipe
> -DHARD_SERVER_LIMIT=2048 -DEAPI -DSHARED_MODULE -I/usr/include/httpd  -c
> mod_security.c
> In file included from /usr/include/httpd/ap_config.h:1129,
>                  from /usr/include/httpd/httpd.h:29,
>                  from mod_security.c:26:
> /usr/include/httpd/hsregex.h:22:1: warning: "ap_private_extern" redefined
> In file included from /usr/include/httpd/httpd.h:29,
>                  from mod_security.c:26:
> /usr/include/httpd/ap_config.h:1025:1: warning: this is the location of the
> previous definition
> cc -bundle -undefined suppress -flat_namespace -Wl,-bind_at_load -o
> mod_security.so mod_security.o
> [activating module `security' in /private/etc/httpd/httpd.conf]
> cp mod_security.so /usr/libexec/httpd/mod_security.so
> chmod 755 /usr/libexec/httpd/mod_security.so
> cp /private/etc/httpd/httpd.conf /private/etc/httpd/httpd.conf.bak
> cp /private/etc/httpd/httpd.conf.new /private/etc/httpd/httpd.conf
> rm /private/etc/httpd/httpd.conf.new

  There's nothing related to ModSecurity in the above output. The warning
  comes from Apache itself.

  BTW, Tiger uses Apache 1.3.x?


> Any ideas why it will not even log, let alone block anything?
> 
> 
> -Mike
> 
> P.S. It worked perfect on Panther server.

  You can't get it to even produce debug output at level 9? If that's
  the case it is probably never invoked.

-- 
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall