Re: Fwd: Slight Issue installing mod_security
Changed for the next release (2.5.5)...
Optionally install the latest version of Lua in the 5.1.x
branch, if it isn't already installed on the server and you will be
using the new Lua engine.
http://www.lua.org/download.html
Note that ModSecurity requires the dynamic libraries. These are
not built by default in the source distribution, so the binary
distribution is recommended.
Thanks,
-B
Joel Joyner wrote:
> The instructions at
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html state:
>
> 4. Install the latest version of Lua in the 5.1.x branch, if it isn't already installed on the server.
>
> http://www.lua.org/download.html
>
> If this step is optional, can this page be modified to indicate that? It would be helpful for us newbies 
.
>
> Thanks.
>
> ----- Original Message -----
> From: "Brian Rectanus" <Brian.Rectanus <at> breach.com>
> To: "Joel Joyner" <joel.joyner <at> uniserveteam.com>
> Cc: mod-security-users <at> lists.sourceforge.net
> Sent: Wednesday, May 7, 2008 1:38:54 PM (GMT-0800) America/Los_Angeles
> Subject: Re: [mod-security-users] Fwd: Slight Issue installing mod_security
>
> The Lua source does not build shared libraries (/usr/lib/liblua5.1.so),
> but only static libs (/usr/lib/liblua5.1.a). ModSecurity requires the
> shared libraries.
>
> If you do want Lua support (you do not unless you are going to write Lua
> rules yourself). Then you need to install the binaries from the Lua
> site, or build the Lua shared libs yourself. You can do this to build
> the shared libs:
>
> http://sourceforge.net/mailarchive/message.php?msg_id=47E2E3FC.3060307%40breach.com
>
> -B
>
> Joel Joyner wrote:
>> Hello everyone. I'm attempting to follow along with the instructions at :
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html
to install mod_security. I am installing this on CentOS 4.6 server with Plesk for Linux 8.3 installed.
>>
>> I have libxml2 already installed, and lua 5.1.3 installed via source code. Lua was installed by running
'make linux' then 'make install' in the directory created by extracting the "lua-5.1.3.tar.gz" archive file.
>>
>> "make install" gave me this output:
>>
>> cd src && mkdir -p /usr/local/bin /usr/local/include /usr/local/lib /usr/local/man/man1
/usr/local/share/lua/5.1 /usr/local/lib/lua/5.1
>> cd src && install -p -m 0755 lua luac /usr/local/bin
>> cd src && install -p -m 0644 lua.h luaconf.h lualib.h lauxlib.h ../etc/lua.hpp /usr/local/include
>> cd src && install -p -m 0644 liblua.a /usr/local/lib
>> cd doc && install -p -m 0644 lua.1 luac.1 /usr/local/man/man1
>>
>> I then extracted and successfully installed mod_security, including 'make test'. Later in the
instructions, it says:
>>
>> 8. Edit the main Apache httpd config file (usually httpd.conf)
>>
>> On UNIX (and Windows if you did not copy the DLLs as stated above) you must load libxml2 and lua5.1 before
ModSecurity with something like this:
>>
>> LoadFile /usr/lib/libxml2.so
>> LoadFile /usr/lib/liblua5.1.so
>>
>> However, the file "/usr/lib/liblua5.1.so" does not exist. I also could not find
"/usr/local/lib/liblua5.1.so", nor "/lib/liblua5.1.so". I then searched for anything matching
*lua* in /lib , /usr/lib , and /usr/local/lib , and only found /usr/local/lib/liblua.a . There is also a
directory /usr/local/lib/lua/5.1 , but it is empty.
>>
>> Am I supposed to use "LoadFile /usr/local/lib/liblua.a" or is my install of lua screwed up or ... ?
>>
>> Thanks.
>>
>> -------------------------------------------------------------------------
>> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
>> Don't miss this year's exciting event. There's still time to save $100.
>> Use priority code J8TL2D2.
>> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
>> _______________________________________________
>> mod-security-users mailing list
>> mod-security-users <at> lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>
>
--
--
Brian Rectanus
Breach Security
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
RSS Feed