[Request] modsecurity-crs

[gusbemacbe]

Package:

https://aur.archlinux.org/packages/modsecurity-crs

It depends on the Arch Linux's official libmodsecurity library.

Purpose:

ModSecurity is a popular open-source Web Application Firewall (WAF) that protects against various webserver, website and web application attacks.

OWASP ModSecurity core rule sets are designed to configure generic attack detection rules, and also allow us to add plugins (https://coreruleset.org/docs/concepts/plugins/#how-to-install-a-plugin).

Benefits:

• To add new rules and new plugins to the plugins folder from /usr/share/modsecurity/crs/plugins, so I can add the OWASP CRS GeoIP plugin to this folder.
• CRS rules are not available and the folder plugin does not exist in the official library libmodsecurity.
• You must be aware that the files' SHA512SUM codes can be outdated. Therefore, you must update manually the SHA512SUM codes on the PKGBBUILD file and regenerate the .SCRINFO file.

Building:

1. Run simply makepkg -sc.
2. Verify the validation check.
3. If the validation check fails, you need to update manually the SHA512SUM codes.
4. Run makepkg -sic.

Copyright:

Apache-2.0

Expected Interest:

Most

Already available?

No

Unique request?

Yes

Banned package?

No

More information:

Be aware of the SHA512SUM code update. I have already advised the maintainers.