Joel Joyner | 7 May 21:38

Fwd: Slight Issue installing mod_security

Hello everyone. I'm attempting to follow along with the instructions at :
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html
to install mod_security. I am installing this on CentOS 4.6 server with Plesk for Linux 8.3 installed.

I have libxml2 already installed, and lua 5.1.3 installed via source code. Lua was installed by running
'make linux' then 'make install' in the directory created by extracting the "lua-5.1.3.tar.gz" archive file.

"make install" gave me this output:

cd src && mkdir -p /usr/local/bin /usr/local/include /usr/local/lib /usr/local/man/man1
/usr/local/share/lua/5.1 /usr/local/lib/lua/5.1
cd src && install -p -m 0755 lua luac /usr/local/bin
cd src && install -p -m 0644 lua.h luaconf.h lualib.h lauxlib.h ../etc/lua.hpp /usr/local/include
cd src && install -p -m 0644 liblua.a /usr/local/lib
cd doc && install -p -m 0644 lua.1 luac.1 /usr/local/man/man1

I then extracted and successfully installed mod_security, including 'make test'. Later in the
instructions, it says:

8. Edit the main Apache httpd config file (usually httpd.conf)

On UNIX (and Windows if you did not copy the DLLs as stated above) you must load libxml2 and lua5.1 before
ModSecurity with something like this:

LoadFile /usr/lib/libxml2.so
LoadFile /usr/lib/liblua5.1.so

However, the file "/usr/lib/liblua5.1.so" does not exist. I also could not find
"/usr/local/lib/liblua5.1.so", nor "/lib/liblua5.1.so". I then searched for anything matching
*lua* in /lib , /usr/lib , and /usr/local/lib , and only found /usr/local/lib/liblua.a . There is also a
(Continue reading)

Brian Rectanus | 7 May 22:38

Re: Fwd: Slight Issue installing mod_security

The Lua source does not build shared libraries (/usr/lib/liblua5.1.so),
but only static libs (/usr/lib/liblua5.1.a).  ModSecurity requires the
shared libraries.

If you do want Lua support (you do not unless you are going to write Lua
rules yourself).  Then you need to install the binaries from the Lua
site, or build the Lua shared libs yourself.  You can do this to build
the shared libs:

http://sourceforge.net/mailarchive/message.php?msg_id=47E2E3FC.3060307%40breach.com

-B

Joel Joyner wrote:
> Hello everyone. I'm attempting to follow along with the instructions at :
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html
to install mod_security. I am installing this on CentOS 4.6 server with Plesk for Linux 8.3 installed.
> 
> I have libxml2 already installed, and lua 5.1.3 installed via source code. Lua was installed by running
'make linux' then 'make install' in the directory created by extracting the "lua-5.1.3.tar.gz" archive file.
> 
> "make install" gave me this output:
> 
> cd src && mkdir -p /usr/local/bin /usr/local/include /usr/local/lib /usr/local/man/man1
/usr/local/share/lua/5.1 /usr/local/lib/lua/5.1
> cd src && install -p -m 0755 lua luac /usr/local/bin
> cd src && install -p -m 0644 lua.h luaconf.h lualib.h lauxlib.h ../etc/lua.hpp /usr/local/include
> cd src && install -p -m 0644 liblua.a /usr/local/lib
> cd doc && install -p -m 0644 lua.1 luac.1 /usr/local/man/man1
> 
(Continue reading)

Joel Joyner | 8 May 21:44

Re: Fwd: Slight Issue installing mod_security

The instructions at
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html state:

4. Install the latest version of Lua in the 5.1.x branch, if it isn't already installed on the server.

http://www.lua.org/download.html

If this step is optional, can this page be modified to indicate that? It would be helpful for us newbies :-) .

Thanks. 

----- Original Message -----
From: "Brian Rectanus" <Brian.Rectanus <at> breach.com>
To: "Joel Joyner" <joel.joyner <at> uniserveteam.com>
Cc: mod-security-users <at> lists.sourceforge.net
Sent: Wednesday, May 7, 2008 1:38:54 PM (GMT-0800) America/Los_Angeles
Subject: Re: [mod-security-users] Fwd: Slight Issue installing mod_security

The Lua source does not build shared libraries (/usr/lib/liblua5.1.so),
but only static libs (/usr/lib/liblua5.1.a).  ModSecurity requires the
shared libraries.

If you do want Lua support (you do not unless you are going to write Lua
rules yourself).  Then you need to install the binaries from the Lua
site, or build the Lua shared libs yourself.  You can do this to build
the shared libs:

http://sourceforge.net/mailarchive/message.php?msg_id=47E2E3FC.3060307%40breach.com

-B
(Continue reading)

Brian Rectanus | 9 May 00:01

Re: Fwd: Slight Issue installing mod_security

Changed for the next release (2.5.5)...

  Optionally install the latest version of Lua in the 5.1.x
  branch, if it isn't already installed on the server and you will be
  using the new Lua engine.

  http://www.lua.org/download.html

  Note that ModSecurity requires the dynamic libraries. These are
  not built by default in the source distribution, so the binary
  distribution is recommended.

Thanks,
-B

Joel Joyner wrote:
> The instructions at
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html state:
> 
> 4. Install the latest version of Lua in the 5.1.x branch, if it isn't already installed on the server.
> 
> http://www.lua.org/download.html
> 
> If this step is optional, can this page be modified to indicate that? It would be helpful for us newbies :-) .
> 
> Thanks. 
> 
> ----- Original Message -----
> From: "Brian Rectanus" <Brian.Rectanus <at> breach.com>
> To: "Joel Joyner" <joel.joyner <at> uniserveteam.com>
(Continue reading)

William Salusky | 9 May 04:56
Picon

Re: Fwd: Slight Issue installing mod_security

Joel,

I've been where you are, and was just afraid to ask.  No guarantees that this will work for you but it works for both my 32bit and 64bit builds so YMMV, but I'll share what I've distilled into the patches that I use (based on some of Brian's responses regarding this matter in the past).  If at first it doesn't work, read the archives.  If you don't want to read, pay for support. ;)

If it works, give a shout.  If it doesn't, well... I don't want to hear about it.

# tar xvfz lua-5.1.3.tar.gz
# cd lua-5.1.3
# tar xvfz lua-sharedlib-build-patches.tgz
# patch -p0 < lua-Makefile.diff
# patch -p0 < lua-srcMakefile.diff
# make linux
# make install

;)  Yes, I run it all as root!


W


On Thu, May 8, 2008 at 6:01 PM, Brian Rectanus <Brian.Rectanus <at> breach.com> wrote:
Changed for the next release (2.5.5)...

 Optionally install the latest version of Lua in the 5.1.x
 branch, if it isn't already installed on the server and you will be
 using the new Lua engine.
 Note that ModSecurity requires the dynamic libraries. These are
 not built by default in the source distribution, so the binary
 distribution is recommended.

Thanks,
-B

Joel Joyner wrote:
> The instructions at http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html state:
>
> 4. Install the latest version of Lua in the 5.1.x branch, if it isn't already installed on the server.
>
> http://www.lua.org/download.html
>
> If this step is optional, can this page be modified to indicate that? It would be helpful for us newbies :-) .
>
> Thanks.
>
> ----- Original Message -----
> From: "Brian Rectanus" <Brian.Rectanus <at> breach.com>
> To: "Joel Joyner" <joel.joyner <at> uniserveteam.com>
> Cc: mod-security-users <at> lists.sourceforge.net
> Sent: Wednesday, May 7, 2008 1:38:54 PM (GMT-0800) America/Los_Angeles
> Subject: Re: [mod-security-users] Fwd: Slight Issue installing mod_security
>
> The Lua source does not build shared libraries (/usr/lib/liblua5.1.so),
> but only static libs (/usr/lib/liblua5.1.a).  ModSecurity requires the
> shared libraries.
>
> If you do want Lua support (you do not unless you are going to write Lua
> rules yourself).  Then you need to install the binaries from the Lua
> site, or build the Lua shared libs yourself.  You can do this to build
> the shared libs:
>
> http://sourceforge.net/mailarchive/message.php?msg_id=47E2E3FC.3060307%40breach.com
>
> -B
>
> Joel Joyner wrote:
>> Hello everyone. I'm attempting to follow along with the instructions at : http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html to install mod_security. I am installing this on CentOS 4.6 server with Plesk for Linux 8.3 installed.
>>
>> I have libxml2 already installed, and lua 5.1.3 installed via source code. Lua was installed by running 'make linux' then 'make install' in the directory created by extracting the "lua-5.1.3.tar.gz" archive file.
>>
>> "make install" gave me this output:
>>
>> cd src && mkdir -p /usr/local/bin /usr/local/include /usr/local/lib /usr/local/man/man1 /usr/local/share/lua/5.1 /usr/local/lib/lua/5.1
>> cd src && install -p -m 0755 lua luac /usr/local/bin
>> cd src && install -p -m 0644 lua.h luaconf.h lualib.h lauxlib.h ../etc/lua.hpp /usr/local/include
>> cd src && install -p -m 0644 liblua.a /usr/local/lib
>> cd doc && install -p -m 0644 lua.1 luac.1 /usr/local/man/man1
>>
>> I then extracted and successfully installed mod_security, including 'make test'. Later in the instructions, it says:
>>
>> 8. Edit the main Apache httpd config file (usually httpd.conf)
>>
>> On UNIX (and Windows if you did not copy the DLLs as stated above) you must load libxml2 and lua5.1 before ModSecurity with something like this:
>>
>> LoadFile /usr/lib/libxml2.so
>> LoadFile /usr/lib/liblua5.1.so
>>
>> However, the file "/usr/lib/liblua5.1.so" does not exist. I also could not find "/usr/local/lib/liblua5.1.so", nor "/lib/liblua5.1.so". I then searched for anything matching *lua* in /lib , /usr/lib , and /usr/local/lib , and only found /usr/local/lib/liblua.a . There is also a directory /usr/local/lib/lua/5.1 , but it is empty.
>>
>> Am I supposed to use "LoadFile /usr/local/lib/liblua.a" or is my install of lua screwed up or ... ?
>>
>> Thanks.
>>
>> -------------------------------------------------------------------------
>> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
>> Don't miss this year's exciting event. There's still time to save $100.
>> Use priority code J8TL2D2.
>> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
>> _______________________________________________
>> mod-security-users mailing list
>> mod-security-users <at> lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>
>


--
Brian Rectanus
Breach Security

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users

Attachment (lua-sharedlib-build-patches.tgz): application/x-gzip, 618 bytes
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Joel Joyner | 9 May 19:57

Re: Fwd: Slight Issue installing mod_security

Thanks ... I don't think I need Lua so I'm just going to skip it and see how things go. So far so good.

---------------------------------------------------------
Joel Joyner
Systems Administrator
Uniserve Communications Corp.
www.uniserve.com

Providing quality internet and communications
services to over 250,000 customers.
---------------------------------------------------------

----- Original Message -----
From: "Brian Rectanus" <Brian.Rectanus <at> breach.com>
To: "Joel Joyner" <joel.joyner <at> uniserveteam.com>
Cc: support <at> modsecurity.org, mod-security-users <at> lists.sourceforge.net
Sent: Thursday, May 8, 2008 3:01:44 PM (GMT-0800) America/Los_Angeles
Subject: Re: [mod-security-users] Fwd: Slight Issue installing mod_security

Changed for the next release (2.5.5)...

  Optionally install the latest version of Lua in the 5.1.x
  branch, if it isn't already installed on the server and you will be
  using the new Lua engine.

  http://www.lua.org/download.html

  Note that ModSecurity requires the dynamic libraries. These are
  not built by default in the source distribution, so the binary
  distribution is recommended.

Thanks,
-B

Joel Joyner wrote:
> The instructions at
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html state:
> 
> 4. Install the latest version of Lua in the 5.1.x branch, if it isn't already installed on the server.
> 
> http://www.lua.org/download.html
> 
> If this step is optional, can this page be modified to indicate that? It would be helpful for us newbies :-) .
> 
> Thanks. 
> 
> ----- Original Message -----
> From: "Brian Rectanus" <Brian.Rectanus <at> breach.com>
> To: "Joel Joyner" <joel.joyner <at> uniserveteam.com>
> Cc: mod-security-users <at> lists.sourceforge.net
> Sent: Wednesday, May 7, 2008 1:38:54 PM (GMT-0800) America/Los_Angeles
> Subject: Re: [mod-security-users] Fwd: Slight Issue installing mod_security
> 
> The Lua source does not build shared libraries (/usr/lib/liblua5.1.so),
> but only static libs (/usr/lib/liblua5.1.a).  ModSecurity requires the
> shared libraries.
> 
> If you do want Lua support (you do not unless you are going to write Lua
> rules yourself).  Then you need to install the binaries from the Lua
> site, or build the Lua shared libs yourself.  You can do this to build
> the shared libs:
> 
> http://sourceforge.net/mailarchive/message.php?msg_id=47E2E3FC.3060307%40breach.com
> 
> -B
> 
> Joel Joyner wrote:
>> Hello everyone. I'm attempting to follow along with the instructions at :
http://www.modsecurity.org/documentation/modsecurity-apache/2.5.2/html-multipage/installation.html
to install mod_security. I am installing this on CentOS 4.6 server with Plesk for Linux 8.3 installed.
>>
>> I have libxml2 already installed, and lua 5.1.3 installed via source code. Lua was installed by running
'make linux' then 'make install' in the directory created by extracting the "lua-5.1.3.tar.gz" archive file.
>>
>> "make install" gave me this output:
>>
>> cd src && mkdir -p /usr/local/bin /usr/local/include /usr/local/lib /usr/local/man/man1
/usr/local/share/lua/5.1 /usr/local/lib/lua/5.1
>> cd src && install -p -m 0755 lua luac /usr/local/bin
>> cd src && install -p -m 0644 lua.h luaconf.h lualib.h lauxlib.h ../etc/lua.hpp /usr/local/include
>> cd src && install -p -m 0644 liblua.a /usr/local/lib
>> cd doc && install -p -m 0644 lua.1 luac.1 /usr/local/man/man1
>>
>> I then extracted and successfully installed mod_security, including 'make test'. Later in the
instructions, it says:
>>
>> 8. Edit the main Apache httpd config file (usually httpd.conf)
>>
>> On UNIX (and Windows if you did not copy the DLLs as stated above) you must load libxml2 and lua5.1 before
ModSecurity with something like this:
>>
>> LoadFile /usr/lib/libxml2.so
>> LoadFile /usr/lib/liblua5.1.so
>>
>> However, the file "/usr/lib/liblua5.1.so" does not exist. I also could not find
"/usr/local/lib/liblua5.1.so", nor "/lib/liblua5.1.so". I then searched for anything matching
*lua* in /lib , /usr/lib , and /usr/local/lib , and only found /usr/local/lib/liblua.a . There is also a
directory /usr/local/lib/lua/5.1 , but it is empty.
>>
>> Am I supposed to use "LoadFile /usr/local/lib/liblua.a" or is my install of lua screwed up or ... ?
>>
>> Thanks.
>>
>> -------------------------------------------------------------------------
>> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
>> Don't miss this year's exciting event. There's still time to save $100. 
>> Use priority code J8TL2D2. 
>> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
>> _______________________________________________
>> mod-security-users mailing list
>> mod-security-users <at> lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> 
> 

--

-- 
Brian Rectanus
Breach Security

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone

Gmane