Apache security module installation?

Hello,

I have installed “apache mod_security2” with yast. My guess is security module is not working out of the box, so I added "security2, and unique_id" to /etc/syconfig/apache2, and restarted apache server which also made “modsec_audit.log, and modsec_debug.log” in /srv/www/logs. Also I have added “SecRuleEngine On” to /etc/apache2/vhosts.d/www(dot)domain_name(dot)com.conf.
However I’m still not sure mod_security is working??

Hi
Have a read of this article;
http://www.novell.com/communities/node/5980/securing-apache-web-server-modsecurity-256


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.27.39-0.3-default
up 2 days 14:38, 3 users, load average: 0.45, 0.46, 0.29
GPU GeForce 8600 GTS Silent - CUDA Driver Version: 190.18

@malcolmlewis

Hello,

I have seen that “installation document” before but somehow I get lost in it … is there more simple way to do it?
Is it possible to continue what I have started above and finish in couple of steps?

Hi
As far as I can see, just have to start from the section ‘Enabling
mod_security’ and then modify the policy file to test.


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.27.39-0.3-default
up 2 days 16:12, 3 users, load average: 0.17, 0.21, 0.27
GPU GeForce 8600 GTS Silent - CUDA Driver Version: 190.18

Hi
Just tested it here (SLES11 though), works fine although
the /etc/apache2/conf.d already contained the file so no need to
include in the httpd.conf. Also it’s libxml2.so.2 to load.

YUK! my server says it’s M$ IIS!!! :wink:


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.27.39-0.3-default
up 2 days 17:26, 3 users, load average: 1.38, 1.26, 1.05
GPU GeForce 8600 GTS Silent - CUDA Driver Version: 190.18