4eb48dab26
27 Nov 2007 - 2.1.4 ------------------- * Updated included Core Ruleset to version 1.5 and noted in the docs that XML support is required to use the rules without modification. * Fixed an evasion FP, mistaking a multipart non-boundary for a boundary. * Fixed multiple warnings on Solaris and/or 64bit builds. * Do not process subrequests in phase 2-4, but do hand off the request data. * Fixed a blocking FP in the multipart parser, which affected Safari. 11 Sep 2007 - 2.1.3 ------------------- * Updated multipart parsing code adding variables to allow checking for various parsing issues (request body abnormalities). * Allow mod_rpaf and mod_extract_forwarded2 to work before ModSecurity. * Quiet some compiler warnings. * Do not block internal ErrorDocument requests after blocking request. * Added ability to compile without an external API (use -DNO_MODSEC_API). 27 Jul 2007 - 2.1.2 ------------------- * Cleaned up and clarified some documentation. * Update included core rules to latest version (1.4.3). * Enhanced ability to alert/audit failed requests. * Do not trigger "pause" action for internal requests. * Fixed issue with requests that use internal requests. These had the potential to be intercepted incorrectly when other Apache httpd modules that used internal requests were used with mod_security. * Added Solaris and Cygwin to the list of platforms not supporting the hidden visibility attribute. * Fixed decoding full-width unicode in t:urlDecodeUni. * Lessen some overhead of debugging messages and calculations. * Do not try to intercept a request after a failed rule. This fixes the issue associated with an "Internal Error: Asked to intercept request but was_intercepted is zero" error message. * Added SecAuditLog2 directive to allow redundent concurrent audit log index files. This will allow sending audit data to two consoles, etc. * Small performance improvement in memory management for rule execution.
52 lines
1.5 KiB
Makefile
52 lines
1.5 KiB
Makefile
# $NetBSD: Makefile,v 1.7 2008/01/04 10:05:51 adrianp Exp $
|
|
|
|
DISTNAME= modsecurity-apache_2.1.4
|
|
PKGNAME= ${APACHE_PKG_PREFIX}-${DISTNAME:S/apache_//}
|
|
CATEGORIES= www security
|
|
MASTER_SITES= http://www.modsecurity.org/download/
|
|
|
|
MAINTAINER= adrianp@NetBSD.org
|
|
HOMEPAGE= http://www.modsecurity.org/
|
|
COMMENT= Intrusion detection and prevention engine for web applications
|
|
|
|
.include "../../mk/apache.mk"
|
|
.include "options.mk"
|
|
|
|
PKG_APACHE_ACCEPTED= apache2
|
|
BUILD_DIRS= apache2
|
|
EGDIR= ${PREFIX}/share/examples/ap-security
|
|
CONF_FILES= ${EGDIR}/modsecurity.conf-minimal \
|
|
${PKG_SYSCONFDIR}/httpd/modsecurity.conf
|
|
MESSAGE_SRC+= ${WRKDIR}/.MESSAGE_SRC
|
|
|
|
BUILDLINK_API_DEPENDS.apache+= apache>=2.0.59nb2
|
|
|
|
SUBST_CLASSES= make
|
|
SUBST_STAGE.make= post-patch
|
|
SUBST_FILES.make= apache2/Makefile
|
|
SUBST_SED.make= -e "s|@PREFIX@|${PREFIX}|g"
|
|
SUBST_MESSAGE.make= Fixing Makefiles.
|
|
|
|
.if !empty(PKG_OPTIONS:Mxml)
|
|
SUBST_SED.make+= -e "s|@XMLINC@|-I${BUILDLINK_PREFIX.libxml2}/include/libxml2|g"
|
|
SUBST_SED.make+= -e "s|@XMLDEFS@|-DWITH_LIBXML2|g"
|
|
.else
|
|
SUBST_SED.make+= -e "s|@XMLINC@||g"
|
|
SUBST_SED.make+= -e "s|@XMLDEFS@||g"
|
|
.endif
|
|
|
|
post-build:
|
|
${CP} ${PKGDIR:Q}/MESSAGE ${WRKDIR:Q}/.MESSAGE_SRC
|
|
.if !empty(PKG_OPTIONS:Mxml)
|
|
${CP} ${PKGDIR:Q}/MESSAGE.xml ${WRKDIR:Q}/.MESSAGE_SRC.xml
|
|
.endif
|
|
|
|
post-install:
|
|
${INSTALL_DATA_DIR} ${EGDIR}
|
|
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/ap-security
|
|
|
|
${INSTALL_DATA} ${WRKSRC}/modsecurity.conf-minimal ${EGDIR}
|
|
cd ${WRKSRC}/doc && ${PAX} -rw . ${PREFIX}/share/doc/ap-security
|
|
|
|
.include "../../devel/pcre/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|