diff options
author | Diego Elio Pettenò <flameeyes@gentoo.org> | 2012-06-16 18:00:11 +0000 |
---|---|---|
committer | Diego Elio Pettenò <flameeyes@gentoo.org> | 2012-06-16 18:00:11 +0000 |
commit | 4688db854aa2326db7e560a57e4c8172fdc2981f (patch) | |
tree | 7b6d1b1727663809a4e6f0af87c7ea45488e6720 /www-apache/modsecurity-crs | |
parent | Mask dev-perl/Tie-RegexpHash for removal (#421461) (diff) | |
download | gentoo-2-4688db854aa2326db7e560a57e4c8172fdc2981f.tar.gz gentoo-2-4688db854aa2326db7e560a57e4c8172fdc2981f.tar.bz2 gentoo-2-4688db854aa2326db7e560a57e4c8172fdc2981f.zip |
Version bump.
(Portage version: 2.2.0_alpha110/cvs/Linux x86_64)
Diffstat (limited to 'www-apache/modsecurity-crs')
-rw-r--r-- | www-apache/modsecurity-crs/ChangeLog | 8 | ||||
-rw-r--r-- | www-apache/modsecurity-crs/modsecurity-crs-2.2.5.ebuild | 78 |
2 files changed, 85 insertions, 1 deletions
diff --git a/www-apache/modsecurity-crs/ChangeLog b/www-apache/modsecurity-crs/ChangeLog index 2ef8379ad8f7..b6187e09237b 100644 --- a/www-apache/modsecurity-crs/ChangeLog +++ b/www-apache/modsecurity-crs/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for www-apache/modsecurity-crs # Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/www-apache/modsecurity-crs/ChangeLog,v 1.20 2012/03/25 13:51:30 ranger Exp $ +# $Header: /var/cvsroot/gentoo-x86/www-apache/modsecurity-crs/ChangeLog,v 1.21 2012/06/16 18:00:11 flameeyes Exp $ + +*modsecurity-crs-2.2.5 (16 Jun 2012) + + 16 Jun 2012; Diego E. Pettenò <flameeyes@gentoo.org> + +modsecurity-crs-2.2.5.ebuild: + Version bump. 25 Mar 2012; Brent Baude <ranger@gentoo.org> modsecurity-crs-2.2.4.ebuild: Marking modsecurity-crs-2.2.4 ppc for bug 409199 diff --git a/www-apache/modsecurity-crs/modsecurity-crs-2.2.5.ebuild b/www-apache/modsecurity-crs/modsecurity-crs-2.2.5.ebuild new file mode 100644 index 000000000000..7c8d5d803165 --- /dev/null +++ b/www-apache/modsecurity-crs/modsecurity-crs-2.2.5.ebuild @@ -0,0 +1,78 @@ +# Copyright 1999-2012 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/www-apache/modsecurity-crs/modsecurity-crs-2.2.5.ebuild,v 1.1 2012/06/16 18:00:11 flameeyes Exp $ + +EAPI=4 + +DESCRIPTION="Core Rule Set for ModSecurity" +HOMEPAGE="http://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project" +SRC_URI="mirror://sourceforge/mod-security/${PN}_${PV}.tar.gz" + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="~amd64 ~ppc ~sparc ~x86" +IUSE="" + +RDEPEND=">=www-apache/mod_security-2.5.13-r1" +DEPEND="" + +S="${WORKDIR}/${PN}_${PV}" + +RULESDIR=/etc/modsecurity + +src_install() { + insinto "${RULESDIR}"/base_rules + doins base_rules/* + + insinto "${RULESDIR}"/optional_rules + doins optional_rules/* + + insinto "${RULESDIR}"/experimental_rules + doins experimental_rules/* + + dodoc CHANGELOG README + + ( + cat - <<EOF +<IfDefine SECURITY> +EOF + + cat modsecurity_crs_10_config.conf.example + + cat - <<EOF + +Include /etc/modsecurity/base_rules/*.conf + +# Optionally use the other rules as well +# Include /etc/modsecurity/optional_rules/*.conf +# Include /etc/modsecurity/experimental_rules/*.conf +</IfDefine> + +# -*- apache -*- +# vim: ts=4 filetype=apache + +EOF + ) > "${T}"/"80_${PN}.conf" + + insinto /etc/apache2/modules.d/ + doins "${T}"/"80_${PN}.conf" +} + +pkg_postinst() { + elog + elog "If you want to enable further rules, check the following directories:" + elog " ${RULESDIR}/optional_rules" + elog " ${RULESDIR}/experimental_rules" + elog "" + elog "Starting from version 2.0.9, the default for the Core Rule Set is again to block" + elog "when rules hit. If you wish to go back to the 2.0.8 method of anomaly scoring, you" + elog "should change 80_${PN}.conf so that you have these settings enabled:" + elog "" + elog " #SecDefaultAction \"phase:2,deny,log\"" + elog " SecAction \"phase:1,t:none,nolog,pass,setvar:tx.anomaly_score_blocking=on\"" + elog "" + elog "Starting from version 2.1.2 rules are installed, for consistency, under" + elog "/etc/modsecurity, and can be configured with the following file:" + elog " /etc/apache2/modules.d/80_${PN}.conf" + elog "" +} |