【运维日记 A】第一次安装modsecurity+linux

前置条件准备
1)安装libtool
  yum -y install libtool
2)安装zlib，openssl，pcre
 yum install zlib zlib-devel openssl openssl-devel  pcre pcre-devel


3)安装apacher
yum install httpd  -y
4)运行apacher
service httpd start
service httpd configtest 检查配置文件
5）安装依赖包 pcre httpd-devel libxml2 apr
yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel
6）检查apacher配置文件
vi /etc/httpd/conf/httpd.conf


安装modsecurity
1）tar xzvf modsecurity-2.9.1.tar.gz
2）cd modsecurity-2.9.1
3)./autogen.sh
4)./configure
5）make
6）make install
7)cp /usr/local/modsecurity/lib/mod_security2.so /etc/httpd/modules/
8)chmod 777 /etc/httpd/modules/mod_security2.so
9）cp /usr/local/src/modsecurity-2.9.1/unicode.mapping /etc/httpd/conf/

验证modsecurity安装
1）修改apacher配置文件httpd.conf
 添加下面两行


LoadModule security2_module modules/mod_security2.so

LoadFile /usr/lib64/libxml2.so

#LoadModule unique_id_module modules/mod_unique_id.so 去掉注解

2）重启Apacher
service httpd restart


成功启动后，modsecurity安装成功了。后面将讨论OWASP规则配置。
可以参考下面两个URL
http://www.2cto.com/article/201407/319878.html
http://www.freebuf.com/articles/web/8749.html