[ubuntu-hardened] ubuntu-hardened Digest, Vol 97, Issue 2

[Voros Suleimaan]

Hi Liam!
check brokerage charges!

True Glue
*Suleimaan Voros, Ph.D*
___________________________________
Your Time, Your Money, Your Project
Official Security Partner: McAfee

On Sun, May 14, 2017 at 5:30 PM, <ubuntu-hardened-request at lists.ubuntu.com>
wrote:

> Send ubuntu-hardened mailing list submissions to
>         ubuntu-hardened at lists.ubuntu.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened
> or, via email, send a message with subject or body 'help' to
>         ubuntu-hardened-request at lists.ubuntu.com
>
> You can reach the person managing the list at
>         ubuntu-hardened-owner at lists.ubuntu.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of ubuntu-hardened digest..."
>
>
> Today's Topics:
>
>    1.  Questions about Update Apache for Modsecurity
>       (lannoun at runbox.com)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sat, 13 May 2017 15:35:57 +0200
> From: "lannoun at runbox.com" <lannoun at runbox.com>
> To: ubuntu-hardened at lists.ubuntu.com
> Subject: [ubuntu-hardened] Questions about Update Apache for
>         Modsecurity
> Message-ID: <6c76ec2a-75c1-bab6-188c-e96cfdb97a37 at runbox.com>
> Content-Type: text/plain; charset=utf-8; format=flowed
>
> Hi,
>
> Sorry for this dumb question. I'm installing apache2 + modsecurity.
>
> I'm using Ubuntu 16.10 with Apache
>
> apache2 -v
> Server version: Apache/2.4.18 (Ubuntu)
> Server built:   2017-05-05T16:32:00
>
> I have installed modsecurity and started to load rules, but I got this
> syntax error related to files .data and .conf on activated rules.
>
> For example:
>
> apache2[1408]: apache2: Syntax error on line 152 of
> /etc/apache2/apache2.conf: Syntax error on line 12 of
> /etc/apache2/mods-enabled/security2.conf: Syntax error on line 301 of
> /usr/share/modsecurity-crs/activated_rules/modsecurity_
> 40_generic_attacks.data:
> /usr/share/modsecurity-crs/activated_rules/modsecurity_
> 40_generic_attacks.data:338:
> <input> was not
> closed.\n/usr/share/modsecurity-crs/activated_
> rules/modsecurity_40_generic_attacks.data:301:
> <![cdata[> was not closed.
>
>
> I have not loaded rules form external source (at the moment) but only
> from official Ubuntu's repositories.
>
> Doing some research the problem seem related to old Apache version.
>
> So basically AFAIK I have just to find a way to get an update Apache.
>
> Is correct and safe if I install the version provided by Ubuntu zesty
> that is the most up to date?
>
> https://packages.ubuntu.com/search?suite=zesty&arch=any&
> searchon=names&keywords=apache2
>
> by adding repo and using apt-get install -t zesty apache2
>
>
> Any other suggestion for getting modsecurity to work with rules?
>
> Thanks a lot.
>
> Liam
>
>
>
>
> ------------------------------
>
> --
> ubuntu-hardened mailing list
> ubuntu-hardened at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened
>
>
> End of ubuntu-hardened Digest, Vol 97, Issue 2
> **********************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-hardened/attachments/20170515/864d4b70/attachment.html>