Summary: ModSecurity Rules Name: mod_security_crs Version: 3.3.5 Release: 1%{?dist} License: ASL 2.0 URL: https://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project Source: https://github.com/coreruleset/coreruleset/archive/refs/tags/v%{version}.tar.gz BuildArch: noarch Requires: mod_security >= 2.9.6 Obsoletes: mod_security_crs-extras < 3.0.0 Patch0: mod_security_crs-early-blocking.patch # https://issues.redhat.com/browse/RHEL-16358 Patch1: mod_security_crs-rule-941310-dont-match-japanese-word.patch # https://issues.redhat.com/browse/RHEL-22733 Patch2: mod_security_crs-rule-913100-req-scanner-detection.patch %description This package provides the base rules for mod_security. %prep %setup -q -n coreruleset-%{version} %patch0 -p1 -b .early_blocking %patch1 -p1 -b .rule_941310 %patch2 -p1 -b .rule_913100 %build %install install -d %{buildroot}%{_sysconfdir}/httpd/modsecurity.d/ install -d %{buildroot}%{_sysconfdir}/httpd/modsecurity.d/activated_rules install -d %{buildroot}%{_datarootdir}/mod_modsecurity_crs/rules # To exclude rules (pre/post) mv rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example %{buildroot}%{_sysconfdir}/httpd/modsecurity.d/activated_rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf mv rules/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf.example %{buildroot}%{_sysconfdir}/httpd/modsecurity.d/activated_rules/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf install -m0644 rules/*.conf %{buildroot}%{_datarootdir}/mod_modsecurity_crs/rules/ install -m0644 rules/*.data %{buildroot}%{_datarootdir}/mod_modsecurity_crs/rules/ mv crs-setup.conf.example %{buildroot}%{_sysconfdir}/httpd/modsecurity.d/crs-setup.conf # activate base_rules for f in `ls %{buildroot}%{_datarootdir}/mod_modsecurity_crs/rules/` ; do ln -s %{_datarootdir}/mod_modsecurity_crs/rules/$f %{buildroot}%{_sysconfdir}/httpd/modsecurity.d/activated_rules/$f; done %files %license LICENSE %doc CHANGES.md README.md %config(noreplace) %{_sysconfdir}/httpd/modsecurity.d/activated_rules/* %config(noreplace) %{_sysconfdir}/httpd/modsecurity.d/crs-setup.conf %{_datarootdir}/mod_modsecurity_crs %changelog * Mon May 20 2024 Luboš Uhliarik - 3.3.5-1 - Resolves: RHEL-32964 - new version 3.3.5 * Fri Feb 09 2024 Luboš Uhliarik - 3.3.4-3 - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the REQUEST-913-SCANNER-DETECTION.conf blocks requests with "User-agent: urlgrabber/3.10 yum/3.4.3" * Fri Feb 02 2024 Luboš Uhliarik - 3.3.4-2 - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs * Mon Dec 05 2022 Luboš Uhliarik - 3.3.4-1 - new version 3.3.4 - Resolves: #2143210 - [RFE] upgrade mod_security_crs to latest upstream 3.3.x * Wed Sep 07 2022 Tomas Korbar - 3.3.0-6 - Fix application of early blocking patch - Related: rhbz#2115313 * Fri Aug 05 2022 Tomas Korbar - 3.3.0-5 - Fix patch for early blocking - Related: rhbz#2115313 * Thu Aug 04 2022 Tomas Korbar - 3.3.0-4 - Backport early blocking feature - Resolves: rhbz#2115313 * Mon Aug 09 2021 Mohan Boddu - 3.3.0-3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 * Mon Aug 2 2021 Joe Orton - 3.3.0-2 - rebuild (#1986075) * Thu Apr 22 2021 Lubos Uhliarik - 3.3.0-1 - Resolves: #1947962 - [RFE] update mod_security_crs to 3.3 * Fri Apr 16 2021 Mohan Boddu - 3.2.0-2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 * Fri Mar 05 2021 Lubos Uhliarik - 3.2.0-1 - new version 3.2.0 * Tue Jan 26 2021 Fedora Release Engineering - 3.0.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering - 3.0.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jan 29 2020 Fedora Release Engineering - 3.0.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jul 25 2019 Fedora Release Engineering - 3.0.0-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 01 2019 Fedora Release Engineering - 3.0.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering - 3.0.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Feb 08 2018 Fedora Release Engineering - 3.0.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering - 3.0.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sat Apr 22 2017 Athmane Madjoudj - 3.0.0-4 - Exclude rule files should not be symlink * Sat Apr 22 2017 Athmane Madjoudj - 3.0.0-3 - Use versioned obsoletes - Move away from /lib since rules are data * Sat Apr 22 2017 Athmane Madjoudj - 3.0.0-2 - Fix the install part since extra and experimental rules are not longer included in 3.x - Remove EL5 bits since EL5/EPEL5 are OEL-ed - Bump reqs * Sat Apr 22 2017 Athmane Madjoudj - 3.0.0-1 - Update to 3.0.0 - Clean up the spec * Fri Feb 10 2017 Fedora Release Engineering - 2.2.9.20160414git-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Fri Apr 29 2016 Athmane Madjoudj 2.2.9.20160414git-1 - Update to 2.9.20160414git * Tue Mar 08 2016 Athmane Madjoudj 2.2.9.20160219git-1 - Update to 2.2.9 - Minor spec cleanup * Thu Feb 04 2016 Fedora Release Engineering - 2.2.8-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jun 17 2015 Fedora Release Engineering - 2.2.8-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sat Jun 07 2014 Fedora Release Engineering - 2.2.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sat Aug 03 2013 Fedora Release Engineering - 2.2.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 02 2013 Athmane Madjoudj 2.2.8-1 - Update to 2.2.8 - Adapt the spec file to new github tarball schema. - Correct bugus date in the spec file. * Thu Feb 14 2013 Fedora Release Engineering - 2.2.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Mon Nov 19 2012 Peter Vrabec 2.2.6-4 - "extras" subpackage is not provided on RHEL7 * Wed Oct 17 2012 Athmane Madjoudj 2.2.6-3 - Remove the patch since we're requiring mod_security >= 2.7.0 - Require mod_security >= 2.7.0 * Mon Oct 01 2012 Athmane Madjoudj 2.2.6-2 - Add a patch to fix incompatible rules. - Update to new git release * Sat Sep 15 2012 Athmane Madjoudj 2.2.6-1 - Update to 2.2.6 - Update spec file since upstream moved to Github. * Thu Sep 13 2012 Athmane Madjoudj 2.2.5-5 - Enable extra rules sub-package for EPEL. * Tue Aug 28 2012 Athmane Madjoudj 2.2.5-4 - Fix spec for el5 * Tue Aug 28 2012 Athmane Madjoudj 2.2.5-3 - Add BuildRoot def for el5 compatibility * Fri Jul 20 2012 Fedora Release Engineering - 2.2.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jun 22 2012 Peter Vrabec 2.2.5-1 - upgrade * Wed Jun 20 2012 Peter Vrabec 2.2.4-3 - "extras" subpackage is not provided on RHEL * Thu May 03 2012 Peter Vrabec 2.2.4-2 - fix fedora-review issues (#816975) * Thu Apr 19 2012 Peter Vrabec 2.2.4-1 - initial package