Commit Graph

  • 0903a061a6 Fix regression on non-solaris for lua (lua5.1, not lua51). brectanus 2008-01-30 01:00:53 +00:00
  • 8d05c9966d Add some further searching for apr/apu/lua for solaris. brectanus 2008-01-30 00:57:52 +00:00
  • 698bff5fae Make sure solaris can find the stupid httpd included pcre lib if need be. brectanus 2008-01-29 22:16:49 +00:00
  • 588b4fba81 Fix apr_size_t formatting. Do not bother with formatting errors on solaris. brectanus 2008-01-29 22:15:48 +00:00
  • b39bd86797 Fixed typo in lua finding script. brectanus 2008-01-29 21:16:06 +00:00
  • 229b1f9db6 Fix CPPFLAGS when building against httpd src libs. brectanus 2008-01-29 21:11:51 +00:00
  • 764fe94ab0 Wrap the apxs command so we can fix -R option not working on solaris. brectanus 2008-01-29 20:50:35 +00:00
  • d350c5f5d9 Add in a hack to find lua binary install. brectanus 2008-01-29 18:30:40 +00:00
  • 8f6f8c7c06 Add download links for lixml2 and lua in the docs. brectanus 2008-01-29 18:01:28 +00:00
  • af69a45145 Add some extra build files to clean up with "make dist-clean". brectanus 2008-01-29 16:41:18 +00:00
  • 4535b2e67b Cleanup CHANGES and set release dates for 2.5.0-rc2. brectanus 2008-01-29 16:36:36 +00:00
  • 8b207a5362 Note in docs that the K part has fully qualified rules. brectanus 2008-01-28 22:18:16 +00:00
  • ed581b56f4 Revert part of the noauditlog fix in changelog:878. See #451. brectanus 2008-01-28 22:10:12 +00:00
  • 751ce0684d Add signature verification support to the rulset updater script. See #280. brectanus 2008-01-28 21:38:20 +00:00
  • 17219368c9 Added reading options from a config file, unpacking rulesets and email notifications to rules-updater.pl. See #280. brectanus 2008-01-28 20:30:40 +00:00
  • 7777c35a6c Add new type parameter to msre_rule_create() for msc_test. brectanus 2008-01-26 00:55:21 +00:00
  • f8dedc940f Update make to put mlogc in the tools dir. brectanus 2008-01-26 00:47:08 +00:00
  • 2aca5f63f9 Add a basic auto-rule-update script that can download the latest version. See #280. brectanus 2008-01-26 00:36:33 +00:00
  • 4c6dccada2 Fixed noauditlog. See #451. brectanus 2008-01-25 05:52:49 +00:00
  • 52ccced72b Cleanup building actionsets and use minimal default. See #445. Fully resolve all rules before logging. brectanus 2008-01-25 04:52:49 +00:00
  • 946a350043 Fixed removing cained rules with ctl action. brectanus 2008-01-24 22:39:13 +00:00
  • 7f3f2c3712 Update docs for SecUploadFileMode to include the "default" value. brectanus 2008-01-24 22:14:34 +00:00
  • ef6f75f4f7 Update docs for SecUploadFileMode to include the "default" value. brectanus 2008-01-24 22:14:34 +00:00
  • f4a6e716dd Implemented SecUploadFileMode. See #448. brectanus 2008-01-24 22:10:37 +00:00
  • f8adea949c Implemented SecUploadFileMode. See #448. brectanus 2008-01-24 22:10:37 +00:00
  • 09ada31a28 Fixed potential crash if actionset was NULL. See #441 and #442. brectanus 2008-01-24 18:08:39 +00:00
  • a3584993f5 Implement "block" pseudo-action. See #441. brectanus 2008-01-24 05:16:35 +00:00
  • f427f2a120 Remove query string from error log. See #447. brectanus 2008-01-23 18:12:59 +00:00
  • 9dbc7807d9 Remove query string from error log. See #447. brectanus 2008-01-23 18:12:59 +00:00
  • a996e3a52b Update version in preparation for the next release. brectanus 2008-01-23 18:04:31 +00:00
  • e0c0d66906 Update severity documentation, deprecate numerical values. ivanr 2008-01-23 15:34:20 +00:00
  • 00731cc70f Update versions in preparation for 2.5.0-rc2. brectanus 2008-01-22 07:00:32 +00:00
  • c72057bc57 Cleanup CHANGES. brectanus 2008-01-22 06:59:06 +00:00
  • 85e0b4d969 Add parens for clarity. brectanus 2008-01-22 06:53:30 +00:00
  • 18e9ef0808 Remove default transformations. See #445. brectanus 2008-01-22 05:50:42 +00:00
  • c4e1ede358 Fixed merging actionsets so we can build a more accurate rule for auditing. brectanus 2008-01-22 05:39:33 +00:00
  • 0d24a08f33 Implemented SecRuleUpdateActionById. See #442. brectanus 2008-01-19 02:23:41 +00:00
  • be096d8f7c Explain how to install mlogc after building. brectanus 2008-01-18 21:38:50 +00:00
  • c6c4003942 More configure cleanup. Update docs for new install: configure && make && make install Spell check the docs. brectanus 2008-01-18 21:14:21 +00:00
  • 96ff268f64 Replace TABs with 4 spaces. brectanus 2008-01-18 01:04:47 +00:00
  • f4a44bc320 Remove an extraneous debug log. brectanus 2008-01-18 01:02:29 +00:00
  • c68beb2fad Update text version of my review (removed areas that were invalid and/or fixed). brectanus 2008-01-18 00:51:10 +00:00
  • 9fb03d277d Fixing code based on review comments... Cleaned up what vars are cacheable. Added parens around "*foo++" where it clarified the operation to be "*(foo++)". Added " at VARNAME" to operator matches where needed. Escaped var->name in the var generation (user-supplied data). Marked a bunch of TODOs as ENHs instead. Transformed some C++ style comments to C style. Removed the %0-9 macros code which was commented out. Optimized some ctl action code so that multiple ifs are else ifs. Implemented some error messages marked as ENH. Make commented out acmp debugging a configure-time option. Cleanup GEO debug log messages. Added relative filename support for geo dbs. Added help text to Sec* directives. brectanus 2008-01-18 00:47:30 +00:00
  • 99c41afc3d Added a check that SecServerSignature actually worked (Apache changed some of this code as of 2.2.4 and could potentially change it again and break this). Cleaned up some configure code. Cleaned up some extraneous cache logging. Cleaned up the output from the test script. brectanus 2008-01-14 22:32:53 +00:00
  • 3f4462d384 Tag 2.1.5 for release. v2.1.5 brectanus 2008-01-11 19:57:38 +00:00
  • fabeaf5059 Final mlogc configure cleanup. brectanus 2008-01-11 18:21:17 +00:00
  • 62dfbeb80a Do not bother with libcurl if there is no mlogc-src. brectanus 2008-01-11 18:18:18 +00:00
  • bc6c0c76af Add the ability to find curl for mlogc. brectanus 2008-01-11 17:51:58 +00:00
  • 0a6ac05590 Add the ability to build mlogc if it is in the mlogc-src subdir. brectanus 2008-01-11 17:51:06 +00:00
  • b5033e6e29 It is 2008 now :) brectanus 2008-01-11 00:00:31 +00:00
  • ff50437a17 It is 2008 now :) brectanus 2008-01-10 23:53:47 +00:00
  • ac69209fab Prepare for 2.1.5 final release. brectanus 2008-01-10 23:16:05 +00:00
  • d646be9b44 Allow phase 5 rules to be removed by exceptions. brectanus 2008-01-10 23:03:54 +00:00
  • 800dacd743 Add text version of review. brectanus 2008-01-10 22:04:36 +00:00
  • 2d034c5ce6 Finished with pre-2.5 source code review. brectanus 2008-01-10 22:02:47 +00:00
  • 0b9c2810e4 Fix speling. ivanr 2008-01-10 12:54:35 +00:00
  • d8fa66515a Document data formats. ivanr 2008-01-10 12:47:59 +00:00
  • d106a5c4d8 Yet more review data. brectanus 2008-01-10 01:06:38 +00:00
  • b0f7dc1fce More review updates. brectanus 2008-01-09 21:40:19 +00:00
  • f15ef01be9 Tweak error message to make it clear it's not our fault. ivanr 2008-01-09 19:05:20 +00:00
  • b6446dc836 Fixed an old bug in ctl:auditLogParts that was fixed in 2.1.x, but not trunk. brectanus 2008-01-09 01:02:51 +00:00
  • 4b05cfe3d6 Update current review data. brectanus 2008-01-09 00:56:45 +00:00
  • 106a54f876 Fixed partial transformation caching and reduced some debugging output. brectanus 2008-01-09 00:52:51 +00:00
  • 31e3ada844 Fixed phase 5 rules not being excludable. brectanus 2008-01-08 20:45:54 +00:00
  • 433ecf3427 Cleanup configure and add support for using apache src included libs (--with-httpd-src). brectanus 2008-01-08 19:03:24 +00:00
  • 7baf949929 Add --enable-FEATURE options to configure. brectanus 2008-01-08 17:25:43 +00:00
  • 4473e483c1 Update current review and report generation script. brectanus 2008-01-08 16:23:01 +00:00
  • c622e7ec93 Expand PERFORMANCE_MEASUREMENT output to break down the full rule timing into transformation, operator and full. Add a "Transformation completed in N usec." debug line to compliment the operator timing. brectanus 2008-01-08 16:21:40 +00:00
  • a53969a99b Add the beginings of a pre-2.5 code review ala Jupiter. brectanus 2008-01-05 01:17:22 +00:00
  • 2ab009ee9f Add files to support using eclipse w/Jupiter code review plugin. brectanus 2008-01-04 23:33:51 +00:00
  • 36dbd608ce Add a review dir for testing/using Jupiter eclipse plugin. See: http://csdl.ics.hawaii.edu/Tools/Jupiter/ brectanus 2008-01-04 20:24:41 +00:00
  • baac392bf5 More configure cleanup. brectanus 2008-01-03 01:09:01 +00:00
  • 40c57f8716 Cleanup configure script and add back unit tests (make test). brectanus 2008-01-02 23:52:34 +00:00
  • badb2791f1 Initial 'configure' based compilation (buildconf generates configure script). brectanus 2008-01-02 21:32:10 +00:00
  • 7ff1f4bd73 Tag 2.1.5-rc1. v2.1.5-rc1 brectanus 2007-12-21 17:56:30 +00:00
  • 1a4f9f9193 Update version to 2.1.5-rc1. brectanus 2007-12-21 17:53:20 +00:00
  • 50496f6598 Update CHANGES and version date. brectanus 2007-12-21 17:34:42 +00:00
  • a37f1da6c8 Tag 2.5.0-rc1. v2.5.0-rc1 brectanus 2007-12-21 17:29:12 +00:00
  • be9931e00f Make sure all tests pass. brectanus 2007-12-21 16:39:38 +00:00
  • 402f6318bb More test updates. brectanus 2007-12-21 16:20:51 +00:00
  • 2068357af8 Added m.getvars() and finalised Lua support. ivanr 2007-12-21 12:50:03 +00:00
  • 8924f605d4 Add some more test cases. brectanus 2007-12-20 23:42:09 +00:00
  • 6dd6156466 Fixed returns for urlDecodeUni, urlDecode, urlEncode and normalisePathWin. See #439. brectanus 2007-12-20 23:29:07 +00:00
  • 9551218d23 Fixed URL decoding with invalid encoding. See #439. brectanus 2007-12-20 23:01:38 +00:00
  • a210e73257 Fixed return codes for base64Decode, base64Encode, compressWhitespace as well as replaceComments not adding the space for a comment w/o ending. See #439. brectanus 2007-12-20 22:59:26 +00:00
  • ef18503f05 More cleanup and fixes in the testing framework. brectanus 2007-12-20 21:33:29 +00:00
  • bd0a2c0418 Remove \0ooo support from t:escapeSeqDecode. See #423. brectanus 2007-12-20 21:07:13 +00:00
  • 78f83198d0 Remove \0ooo support from t:escapeSeqDecode. See #423. brectanus 2007-12-20 21:04:19 +00:00
  • 4104e261e7 Update verifyCC checks w/data Ofer sent me. brectanus 2007-12-20 19:23:20 +00:00
  • 9504be7d78 Fix a bug in testing framework where NUL is lost in parameter and add support for running only a single test in a conf file. brectanus 2007-12-20 19:22:13 +00:00
  • 246ed9cbc5 Make sure a zero-length CC# does not verify. brectanus 2007-12-20 19:19:34 +00:00
  • 5c40ee0dc6 Update version date. brectanus 2007-12-20 17:05:39 +00:00
  • 59685455d9 Update core rules to 1.5.1. brectanus 2007-12-20 17:01:12 +00:00
  • 8f19a778b4 Update core rules to 1.5.1. brectanus 2007-12-20 16:59:31 +00:00
  • f64c7c39e8 Lua: Added support for scripting to @inspectFile. ivanr 2007-12-20 15:53:23 +00:00
  • 4cecdf4c5b Added support for Lua to the exec action. ivanr 2007-12-20 12:06:30 +00:00
  • a45c4bb551 Lua: Fix compile warnings. ivanr 2007-12-20 10:38:16 +00:00
  • 4fcd787b94 Lua: Support relative filenames in SecRuleScript. ivanr 2007-12-20 10:17:48 +00:00
  • 235fd2c077 Lua: Add ability to retrieve values from persistent collections. ivanr 2007-12-20 09:55:58 +00:00
  • fa4738e865 Lua: Preserve entire scripts, not just main(). This allows for more complex logic to be written as the user can now use functions. It also allows room for future expansion. ivanr 2007-12-20 09:21:35 +00:00