Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Dec 2009 10:37:17 GMT
From:      Carsten Wiedmann <carsten_sttgt@gmx.de>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   misc/141831: upgrade www/mod_security is overwriting existing rules as default setting
Message-ID:  <200912211037.nBLAbHeP022061@www.freebsd.org>
Resent-Message-ID: <200912211040.nBLAe7Jo077416@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         141831
>Category:       misc
>Synopsis:       upgrade www/mod_security is overwriting existing rules as default setting
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Dec 21 10:40:06 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Carsten Wiedmann
>Release:        FreeBSD 8.0-RELEASE
>Organization:
>Environment:
>Description:
Hello,

I've just updated mod_security to 2.5.11 with portupgrade and I was not happy about that all my adjusted rules was overwritten (and also the adjusted mod_security2.conf).

And of course, the installed core rules was version 2.0.4 and now there was also a downgrade to 2.0.3.

Now I've seen there is a SKIP_RULES. That's for make.conf?

It also seems, that the port is not installing the tool "rules-updater".

Regards,
Carsten

>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200912211037.nBLAbHeP022061>