Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

www-servers/nginx: add modsecurity v3 support #26401

Closed
wants to merge 4 commits into from

Conversation

hydrapolic
Copy link
Contributor

@hydrapolic hydrapolic commented Jul 14, 2022

Legacy modsecurity v2 was removed in #26347 as it failed to build due to nginx 1.23.0 api changes, this adds modsecurity v3 with nginx connector.

Tested on ~amd64, thanks.

@gentoo-bot
Copy link

Pull Request assignment

Submitter: @hydrapolic
Areas affected: ebuilds
Packages affected: dev-libs/modsecurity

dev-libs/modsecurity: @gentoo/proxy-maint (new package)

Linked bugs

Bugs linked: 726614, 718358

New packages

This Pull Request appears to be introducing new packages only. Due to limited manpower, adding new packages is considered low priority. This does not mean that your Pull Request will not receive any attention, however, it might take quite some time for it to be reviewed. In the meantime, your new ebuild might find a home in the GURU project repository: the ebuild repository maintained collaboratively by Gentoo users. GURU offers your ebuild a place to be reviewed and improved by other Gentoo users, while making it easy for Gentoo users to install it and enjoy the software it adds.


In order to force reassignment and/or bug reference scan, please append [please reassign] to the pull request title.

Docs: Code of ConductCopyright policy (expl.) ● DevmanualGitHub PRsProxy-maint guide

@gentoo-bot gentoo-bot added new package The PR is adding a new package. self-maintained The PR changes only packages that are maintained by the submitter (i.e. no need to ask anybody else) assigned PR successfully assigned to the package maintainer(s). bug linked Bug/Closes found in footer, and cross-linked with the PR. labels Jul 14, 2022
@gentoo-repo-qa-bot
Copy link
Collaborator

Pull request CI report

Report generated at: 2022-07-14 12:49 UTC
Newest commit scanned: 1e2bd56
Status: ✅ good

There are existing issues already. Please look into the report to make sure none of them affect the packages in question:
https://qa-reports.gentoo.org/output/gentoo-ci/bed1640c21/output.html

@hydrapolic hydrapolic changed the title dev-libs/modsecurity: new package [WIP] dev-libs/modsecurity: new package Jul 14, 2022
@hydrapolic hydrapolic marked this pull request as draft July 14, 2022 16:53
@hydrapolic hydrapolic changed the title [WIP] dev-libs/modsecurity: new package www-servers/nginx: add modsecurity v3 support Jul 14, 2022
@hydrapolic hydrapolic marked this pull request as ready for review July 14, 2022 17:47
@gentoo-repo-qa-bot
Copy link
Collaborator

Pull request CI report

Report generated at: 2022-07-14 17:54 UTC
Newest commit scanned: 93d394c
Status: ✅ good

There are existing issues already. Please look into the report to make sure none of them affect the packages in question:
https://qa-reports.gentoo.org/output/gentoo-ci/88f78561d0/output.html

@ConiKost ConiKost self-assigned this Jul 14, 2022
lua? ( ${LUA_DEPS} )
pcre2? ( dev-libs/libpcre2:= )"
DEPEND="${COMMON_DEPEND}
doc? ( app-doc/doxygen[dot] )"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Doxygen should be BDEPEND.

BDEPEND="virtual/pkgconfig"

DOCS=( AUTHORS CHANGES README.md modsecurity.conf-recommended unicode.mapping )
S="${WORKDIR}/${MY_P}"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

S please after SRC_URI. See skel.ebuild.

default

if use doc; then
dodoc -r doc/html
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This could be a oneliner? use doc && ..

dodoc -r doc/html
fi

rm "${ED}/usr/$(get_libdir)/libmodsecurity.la" || die
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would prefer the generic one find "${ED}" -name '*.la' -delete || die, which most ebuilds use.

Modsecurity is a library that can be used by Nginx:
https://github.com/SpiderLabs/ModSecurity-nginx

For Apache, Modsecurity 2.x is still recommended.

Bug: https://bugs.gentoo.org/726614
Closes: https://bugs.gentoo.org/718358
Signed-off-by: Tomáš Mózes <hydrapolic@gmail.com>
Closes: https://bugs.gentoo.org/726614
Signed-off-by: Tomáš Mózes <hydrapolic@gmail.com>
Signed-off-by: Tomáš Mózes <hydrapolic@gmail.com>
Signed-off-by: Tomáš Mózes <hydrapolic@gmail.com>
@hydrapolic
Copy link
Contributor Author

Thanks for the review @ConiKost, pushed an update.

@gentoo-repo-qa-bot
Copy link
Collaborator

Pull request CI report

Report generated at: 2022-07-19 12:11 UTC
Newest commit scanned: 86eab08
Status: ✅ good

There are existing issues already. Please look into the report to make sure none of them affect the packages in question:
https://qa-reports.gentoo.org/output/gentoo-ci/80e3bdd430/output.html

@hydrapolic
Copy link
Contributor Author

Thank you @ConiKost

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
assigned PR successfully assigned to the package maintainer(s). bug linked Bug/Closes found in footer, and cross-linked with the PR. new package The PR is adding a new package. self-maintained The PR changes only packages that are maintained by the submitter (i.e. no need to ask anybody else)
Projects
None yet
4 participants