Skip to content

DOCS: Incorect requirement to install Apache #1074

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
udf2457 opened this issue Feb 11, 2016 · 4 comments
Closed

DOCS: Incorect requirement to install Apache #1074

udf2457 opened this issue Feb 11, 2016 · 4 comments

Comments

@udf2457
Copy link

udf2457 commented Feb 11, 2016

The NGINX section of your docs (https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#Installation_for_NGINX) says you have to install Apache.

But that's not true anymore (if it was true at all in the first place !).

No need to install all the bloat that comes with Apache, all you need is :...

sudo apt-get install apache2-threaded-dev libxml2-dev
(or the equivalent for non deb/ubuntu systems)

Then just

./configure --enable-standalone-module
make

Much cleaner, fewer files, and .... no Apache ... yay ! ;-

@csanders-git
Copy link

I'm sure @zimmerle will add something here but I think this statement was meant to indicate that you need parts of Apache (for instance the headers which we still see). You also need the APR. Both of these things are counter intuitive when compiling Nginx i think we can all agree :-P perhaps we could update this wiki page to be more clear about build steps though :)

@zimmerle
Copy link
Contributor

Hi,

In fact, for version 2.9.1-rc1 (most recent one) we still need the Apache dependency. I believe that apt-get install installed the Apache as a dependency of apache2-threaded-dev.

ModSecurity version 3 (under development) does not depends on Apache nor Apr. Further information can be found here: https://github.com/SpiderLabs/ModSecurity/tree/libmodsecurity/

Issue #661 contains more information about the Apache dependence.

@udf2457
Copy link
Author

udf2457 commented Feb 11, 2016

@zimmerle

Well, actually, not quite !

The benefit of apache2-threaded-dev vs apache2 (or whatever the "normal" package is called) is that apache2-threaded-dev only installs dev tools and binaries. Apache2 installs the whole caboodle (config files, init scripts and all that nonsense)

@csanders-git
Copy link

@udf2457 I have updated the docs with this information :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants