Package: modsecurity-crs
Version: 2.2.0-1
Severity: normal

Using wheezy packages:
libapache-mod-security/wheezy uptodate 2.5.13-1
libapache2-modsecurity/wheezy uptodate 2.5.13-1
modsecurity-crs/wheezy uptodate 2.2.0-1

and following instructions to include core ruleset in 
/usr/share/doc/modsecurity-crs/README.Debian

apache2ctl configtest gives:
Syntax error on line 91 of 
/usr/share/modsecurity-crs/base_rules/modsecurity_crs_20_protocol_violations.conf:
Error creating rule: Unknown variable: REQBODY_ERROR

http://comments.gmane.org/gmane.comp.apache.mod-security.owasp-crs/283 states
"Ah, I guess you aren't using ModSecurity v2.6.0. You should use the older 
variable name then - REQBODY_PROCESSOR_ERROR"

Either libapache2-modsecurity 2.6.0 should be a dependency or this change 
should be made (works fine patched).

-- System Information:
Debian Release: 6.0.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'oldstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to