Where did this version of modsecurity come from /usr/local/modsecurity/????

[pucky]

I didnt install it. Is it part of some upgrade?

Whats /usr/local/modsecurity doing there?

I have my own version that i installed and setup and its in /etc/httpd/conf/modsecurity2/*

Also, in /usr/local/modsecurity i see a bin file which contains a number of pl files that upgrade rulesets etc.

Is this documented somewhere? Does anyone know when this got installed and why none of those scripts have been talked about?

 

[pucky]

So nobody knows? Maybe you should look in your /usr/local/ for it.

drwxr-xr-x 4 root root 4096 Mar 17 04:23 modsecurity
[root@la1010 modsecurity]# ls -la
total 16
drwxr-xr-x 4 root root 4096 Mar 17 04:23 .
drwxr-xr-x. 23 root root 4096 Mar 23 22:23 ..
drwxr-xr-x 2 root root 4096 Mar 27 19:10 bin
drwxr-xr-x 2 root root 4096 Mar 23 21:57 lib

[root@la1010 modsecurity]# cd bin
[root@la1010 bin]# ls -la
total 120
drwxr-xr-x 2 root root 4096 Mar 27 19:10 .
drwxr-xr-x 4 root root 4096 Mar 17 04:23 ..
-rwxr-xr-x 1 root root 91285 Mar 23 21:57 mlogc <====================
-rwxr-xr-x 1 root root 3370 Mar 23 21:57 mlogc-batch-load.pl <===========================
-rwxr-xr-x 1 root root 12796 Mar 23 21:57 rules-updater.pl <======================

[root@la1010 bin]# cd ../lib
[root@la1010 lib]# ls -la
total 1512
drwxr-xr-x 2 root root 4096 Mar 23 21:57 .
drwxr-xr-x 4 root root 4096 Mar 17 04:23 ..
-rwxr-xr-x 1 root root 1536432 Mar 23 21:57 mod_security2.so

 

[chatwizrd]

I am pretty sure directadmin doesnt install modsecurity at all. I see no reference to it at all in custombuild build script.

 

[pucky]

Well i have found two installations of this on two servers. Does it get installed when you manaually install and compile modsecurity?

 

[Arieh]

I don't have anything on modsecurity. If you installed it, it makes sense that it's in /usr/local/.

OS packages install in /usr/, manual stuff gets in /usr/local/. But DA also puts stuff in /usr/local/, as it's not from the OS and compiles the same as if you would do it yourself manually.

 

[pucky]

I don't have anything on modsecurity. If you installed it, it makes sense that it's in /usr/local/.

Why does that make sense? When you installed it did it move/create /usr/local/modsecurity.

I installed it from /usr/local/src/modsec* then i moved it to /etc/httpd/conf/*.

Maybe its part of the recompile. Its the only thing i can think of that may create the directory if i did not do it manually.

 

[Arieh]

I had just updated my reply.

I'm just saying that if you install something, it might very well put files in /usr/local/.

By the looks of it there are some pl scripts to update rules. It wouldn't make sense to put those in the /etc/httpd dir.