To add new rules and new plugins to the plugins folder from /usr/share/modsecurity/crs/plugins, so I can add the OWASP CRS GeoIP plugin to this folder.
CRS rules are not available and the folder plugin does not exist in the official library libmodsecurity.
You must be aware that the files' SHA512SUM codes can be outdated. Therefore, you must update manually the SHA512SUM codes on the PKGBBUILD file and regenerate the .SCRINFO file.
Building:
Run simply makepkg -sc.
Verify the validation check.
If the validation check fails, you need to update manually the SHA512SUM codes.
Run makepkg -sic.
Copyright:
Apache-2.0
Expected Interest:
Most
Already available?
No
Unique request?
Yes
Banned package?
No
More information:
Be aware of the SHA512SUM code update. I have already advised the maintainers.
Package:
https://aur.archlinux.org/packages/modsecurity-crs
It depends on the Arch Linux's official
libmodsecurity
library.Purpose:
ModSecurity is a popular open-source Web Application Firewall (WAF) that protects against various webserver, website and web application attacks.
OWASP ModSecurity core rule sets are designed to configure generic attack detection rules, and also allow us to add plugins (https://coreruleset.org/docs/concepts/plugins/#how-to-install-a-plugin).
Benefits:
plugins
folder from/usr/share/modsecurity/crs/plugins
, so I can add the OWASP CRS GeoIP plugin to this folder.plugin
does not exist in the official librarylibmodsecurity
.PKGBBUILD
file and regenerate the.SCRINFO
file.Building:
makepkg -sc
.makepkg -sic
.Copyright:
Apache-2.0
Expected Interest:
Most
Already available?
No
Unique request?
Yes
Banned package?
No
More information:
Be aware of the SHA512SUM code update. I have already advised the maintainers.