b1v1r
589274903d
Added PCRE limits and studying by default to help alleviate REDoS reported by Sogeti/ESEC R&D (MODSEC-119).
2010-02-05 18:09:19 +00:00
b1v1r
3ca9a03c7e
Fix typo in configure.in (MODSEC-101).
2009-12-01 16:54:03 +00:00
b1v1r
fd23b6486f
Added a --disable-errors to configure so that you can still build mlogc without httpd/apxs.
2009-10-21 16:31:29 +00:00
b1v1r
7333260b9b
Added SecAuditLogDirMode and SecAuditLogFileMode (MODSEC-82).
...
Cleaned up SecUploadFileMode implementation.
2009-08-25 00:29:56 +00:00
b1v1r
ea4b01fb38
Remove C++ compiler dependency brought in from an overzelous autoscan copy/paste (MODSEC-84).
2009-08-20 00:06:14 +00:00
b1v1r
9a5cf44fda
Cleanup build for mlogc (MODSEC-83).
2009-08-12 18:43:57 +00:00
b1v1r
2f0debef59
Look for env or printenv to search environment vars.
2009-05-28 21:57:49 +00:00
b1v1r
1f866d4bb7
Revert back to --with-libxml so we maintain backwards compat.
...
Look for env and grep commands.
2009-05-27 22:08:04 +00:00
b1v1r
3c0cfbd3ef
Cleanup code for AIX and better non-gcc support (MODSEC-55).
2009-05-16 10:34:57 +00:00
b1v1r
8a11b7cee7
Cleaned up build dependencies and configure options.
2009-04-01 18:51:10 +00:00
b1v1r
0acef426d5
Add a verbose output option to build.
...
Cleanup mlogc build and warnings.
2009-03-05 21:49:41 +00:00
brectanus
c47c3583e0
Added mlogc source.
2008-09-02 23:10:36 +00:00
brectanus
e3ddb2403b
Updated regression suite to use full path to LoadModule.
2008-08-08 22:50:47 +00:00
brectanus
c066e8b3c4
Fixed VAR_CACHE/VAR_DONT_CACHE values with reasons for DONT.
...
Added a DEBUG_MEM define to disable optimization and for future enhcement.
Prevented "counting" vars from being cached.
Prevented vars from being cached unless they are marked "available" in phase.
Now use var->value as the cache hash key as a unique value.
Fixed which pools we are using for rule processing.
Updated regression tests for tfns.
Updated regression test script to handle extra APR_POOL_DEBUG output.
See #364 .
2008-07-30 22:35:52 +00:00
brectanus
ade22567bf
Backport regression suite to 2.5.
2008-07-25 23:15:08 +00:00
brectanus
8beaef9fd8
Make sure the apache includes dir is always included.
2008-03-28 17:02:04 +00:00
brectanus
1e991d6fcd
Add searching for lua in /usr/lib{64|32}.
...
Do not default to using -Werror (warnings are errors).
2008-02-27 23:18:03 +00:00
brectanus
96b3ea6f21
Update unit test framework to build with libtool and show test name in debug log.
2008-02-08 21:33:21 +00:00
brectanus
8d05c9966d
Add some further searching for apr/apu/lua for solaris.
2008-01-30 00:57:52 +00:00
brectanus
698bff5fae
Make sure solaris can find the stupid httpd included pcre lib if need be.
2008-01-29 22:16:49 +00:00
brectanus
229b1f9db6
Fix CPPFLAGS when building against httpd src libs.
2008-01-29 21:11:51 +00:00
brectanus
764fe94ab0
Wrap the apxs command so we can fix -R option not working on solaris.
2008-01-29 20:50:35 +00:00
brectanus
2aca5f63f9
Add a basic auto-rule-update script that can download the latest version. See #280 .
2008-01-26 00:36:33 +00:00
brectanus
f8adea949c
Implemented SecUploadFileMode. See #448 .
2008-01-24 22:10:37 +00:00
brectanus
c6c4003942
More configure cleanup.
...
Update docs for new install: configure && make && make install
Spell check the docs.
2008-01-18 21:14:21 +00:00
brectanus
9fb03d277d
Fixing code based on review comments...
...
Cleaned up what vars are cacheable.
Added parens around "*foo++" where it clarified the operation to be "*(foo++)".
Added " at VARNAME" to operator matches where needed.
Escaped var->name in the var generation (user-supplied data).
Marked a bunch of TODOs as ENHs instead.
Transformed some C++ style comments to C style.
Removed the %0-9 macros code which was commented out.
Optimized some ctl action code so that multiple ifs are else ifs.
Implemented some error messages marked as ENH.
Make commented out acmp debugging a configure-time option.
Cleanup GEO debug log messages.
Added relative filename support for geo dbs.
Added help text to Sec* directives.
2008-01-18 00:47:30 +00:00
brectanus
99c41afc3d
Added a check that SecServerSignature actually worked (Apache changed some of this code as of 2.2.4 and could potentially change it again and break this).
...
Cleaned up some configure code.
Cleaned up some extraneous cache logging.
Cleaned up the output from the test script.
2008-01-14 22:32:53 +00:00
brectanus
fabeaf5059
Final mlogc configure cleanup.
2008-01-11 18:21:17 +00:00
brectanus
62dfbeb80a
Do not bother with libcurl if there is no mlogc-src.
2008-01-11 18:18:18 +00:00
brectanus
0a6ac05590
Add the ability to build mlogc if it is in the mlogc-src subdir.
2008-01-11 17:51:06 +00:00
brectanus
433ecf3427
Cleanup configure and add support for using apache src included libs (--with-httpd-src).
2008-01-08 19:03:24 +00:00
brectanus
7baf949929
Add --enable-FEATURE options to configure.
2008-01-08 17:25:43 +00:00
brectanus
baac392bf5
More configure cleanup.
2008-01-03 01:09:01 +00:00
brectanus
40c57f8716
Cleanup configure script and add back unit tests (make test).
2008-01-02 23:52:34 +00:00
brectanus
badb2791f1
Initial 'configure' based compilation (buildconf generates configure script).
2008-01-02 21:32:10 +00:00