Joel Joyner | 8 May 21:44

Re: Fwd: Slight Issue installing mod_security

The instructions at
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html state:

4. Install the latest version of Lua in the 5.1.x branch, if it isn't already installed on the server.

http://www.lua.org/download.html

If this step is optional, can this page be modified to indicate that? It would be helpful for us newbies :-) .

Thanks. 

----- Original Message -----
From: "Brian Rectanus" <Brian.Rectanus <at> breach.com>
To: "Joel Joyner" <joel.joyner <at> uniserveteam.com>
Cc: mod-security-users <at> lists.sourceforge.net
Sent: Wednesday, May 7, 2008 1:38:54 PM (GMT-0800) America/Los_Angeles
Subject: Re: [mod-security-users] Fwd: Slight Issue installing mod_security

The Lua source does not build shared libraries (/usr/lib/liblua5.1.so),
but only static libs (/usr/lib/liblua5.1.a).  ModSecurity requires the
shared libraries.

If you do want Lua support (you do not unless you are going to write Lua
rules yourself).  Then you need to install the binaries from the Lua
site, or build the Lua shared libs yourself.  You can do this to build
the shared libs:

http://sourceforge.net/mailarchive/message.php?msg_id=47E2E3FC.3060307%40breach.com

-B

Joel Joyner wrote:
> Hello everyone. I'm attempting to follow along with the instructions at :
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html
to install mod_security. I am installing this on CentOS 4.6 server with Plesk for Linux 8.3 installed.
> 
> I have libxml2 already installed, and lua 5.1.3 installed via source code. Lua was installed by running
'make linux' then 'make install' in the directory created by extracting the "lua-5.1.3.tar.gz" archive file.
> 
> "make install" gave me this output:
> 
> cd src && mkdir -p /usr/local/bin /usr/local/include /usr/local/lib /usr/local/man/man1
/usr/local/share/lua/5.1 /usr/local/lib/lua/5.1
> cd src && install -p -m 0755 lua luac /usr/local/bin
> cd src && install -p -m 0644 lua.h luaconf.h lualib.h lauxlib.h ../etc/lua.hpp /usr/local/include
> cd src && install -p -m 0644 liblua.a /usr/local/lib
> cd doc && install -p -m 0644 lua.1 luac.1 /usr/local/man/man1
> 
> I then extracted and successfully installed mod_security, including 'make test'. Later in the
instructions, it says:
> 
> 8. Edit the main Apache httpd config file (usually httpd.conf)
> 
> On UNIX (and Windows if you did not copy the DLLs as stated above) you must load libxml2 and lua5.1 before
ModSecurity with something like this:
> 
> LoadFile /usr/lib/libxml2.so
> LoadFile /usr/lib/liblua5.1.so
> 
> However, the file "/usr/lib/liblua5.1.so" does not exist. I also could not find
"/usr/local/lib/liblua5.1.so", nor "/lib/liblua5.1.so". I then searched for anything matching
*lua* in /lib , /usr/lib , and /usr/local/lib , and only found /usr/local/lib/liblua.a . There is also a
directory /usr/local/lib/lua/5.1 , but it is empty.
> 
> Am I supposed to use "LoadFile /usr/local/lib/liblua.a" or is my install of lua screwed up or ... ?
> 
> Thanks.
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
> Don't miss this year's exciting event. There's still time to save $100. 
> Use priority code J8TL2D2. 
> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
> _______________________________________________
> mod-security-users mailing list
> mod-security-users <at> lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/mod-security-users

--

-- 
Brian Rectanus
Breach Security

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone

Gmane