2

I am trying to install mod_security on a server running Apache 2.4 - if I try and use:

yum install mod_security

it tells me Apache 2.2.15 is a dependency and won't install without this.

I then tried downloading mod_security and compiling it which eventually works but only after requiring httpd-devel due to a dependancy for APXS.

Due to needing to install httpd-devel, mod_security then gets installed for 2.2.15 and the modules do not appear to work with 2.4 - when I try to restart httpd I get an error:

Starting httpd: httpd: Syntax error on line 57 of /opt/httpd/conf/httpd.conf: Cannot load modules/mod_security2.so into server: /opt/httpd/modules/mod_security2.so: undefined symbol: ap_log_error

modules/mod_security2.so was copied manually from /etc/httpd/modules (Apache 2.2.15 directory).

Is there a specific install process for Apache 2.4 which does not require mixing things up by needing to install bits of 2.2?

Improve this question
5
  • 1
    What OS are you using? How did you install apache 2.4? Commented Aug 23, 2016 at 20:38
  • Whoops, sorry! It is Centos 6.5 and apache was installed using yum Commented Aug 23, 2016 at 20:51
  • Short answer: RHEL7/CentOS7 provides RPMs for mod_security, but you are pretty much on your own with RHEL6/CentOS6 unless you find a third party repo to provide the package. Red Hat Software Collections provides Apache 2.4 for EL6, but does not provide mod_security. If you have a Red Hat subscription, you can also find a more detailed answer here: access.redhat.com/solutions/33595 Commented Aug 23, 2016 at 20:51
  • 1
    Using yum from what repository? The default repositories do not include 2.4. Commented Aug 23, 2016 at 20:51
  • rhel-server-rhscl-7-rpms Commented Aug 24, 2016 at 5:24

1 Answer 1

Reset to default
1

It's likely you still have Apache 2.2 installed and when you configured ModSecurity it built it for 2.2.

Here's the steps I use to install ModSecurity from source based on Apache installed in /usr/local/apache2:

#Download ModSecurity wget https://www.modsecurity.org/tarball/2.9.1/modsecurity-2.9.1.tar.gz wget https://www.modsecurity.org/tarball/2.9.1/modsecurity-2.9.1.tar.gz.sha256 #Config checksum of download sha256sum -c modsecurity-2.9.1.tar.gz.sha256 #Install ModSecurity: tar -xvf modsecurity-2.9.1.tar.gz cd modsecurity-2.9.1 ./configure --with-apxs=/usr/local/apache2/bin/apxs make sudo make install cp /usr/local/modsecurity/lib/mod_security2.so /usr/local/apache2/modules

Then configure it in Apache config.

Hope that helps.

Improve this answer

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.