Whplus Blog

Make sure you have at least version 2.6.1 of modsecurity installed. Cpanel includes its own modsecurity configuration files and its own modsecurity module. To install gotroot modsecurity rules for the first time you will need to do the following:

1. Download the Free Delayed/Unsupported feed here. Keep in mind the Delayed feed is released 90 days after the realtime feed (that includes any fixes).
2. Unpack the rules in /usr/local/apache/conf/
3. Create the following directories and chmod them accordingly:
   

   mkdir /var/asl
   mkdir /var/asl/data/
   mkdir /var/asl/data/msa
   mkdir /var/asl/data/audit
   mkdir /var/asl/data/suspicious
   chown nobody.nobody /var/asl/data/msa
   chown nobody.nobody /var/asl/data/audit
   chown nobody.nobody /var/asl/data/suspicious
   chmod o-rx -R /var/asl/data/*
   chmod ug+rwx -R /var/asl/data/*

   you will never need to use these directories but they have to be present for the rules to work.

Read the rest of this entry »