a19cd4ffb1
This reverts commit 65a333600d5c88a98d674f637d092807cfc12253. This wasn't tested for correctness with something like fodwatch [0], and should not have been (self-)merged so quickly, especially without further review. It also resulted in the breakage of at least one package [1] (and that's the one we know of and was caught). A few packages that were updated in between this commit and this revert were not reverted back to using `rev`, but other than that, this is a 1:1 revert. [0]: https://codeberg.org/raphaelr/fodwatch [1]: https://github.com/NixOS/nixpkgs/pull/396904 / 758551e4587d75882aebc21a04bee960418f8ce9
116 lines
3.0 KiB
Nix
116 lines
3.0 KiB
Nix
{
|
|
lib,
|
|
stdenv,
|
|
fetchFromGitHub,
|
|
autoreconfHook,
|
|
bison,
|
|
flex,
|
|
pkg-config,
|
|
curl,
|
|
geoip,
|
|
libmaxminddb,
|
|
libxml2,
|
|
lmdb,
|
|
lua,
|
|
pcre,
|
|
pcre2,
|
|
ssdeep,
|
|
yajl,
|
|
nixosTests,
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "libmodsecurity";
|
|
version = "3.0.14";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "owasp-modsecurity";
|
|
repo = "ModSecurity";
|
|
rev = "v${version}";
|
|
hash = "sha256-SaeBO3+WvPhHiJoiOmijB0G3/QYxjAdxgeCVqESS+4U=";
|
|
fetchSubmodules = true;
|
|
};
|
|
|
|
nativeBuildInputs = [
|
|
autoreconfHook
|
|
bison
|
|
flex
|
|
pkg-config
|
|
];
|
|
buildInputs = [
|
|
curl
|
|
geoip
|
|
libmaxminddb
|
|
libxml2
|
|
lmdb
|
|
lua
|
|
pcre
|
|
pcre2
|
|
ssdeep
|
|
yajl
|
|
];
|
|
|
|
outputs = [
|
|
"out"
|
|
"dev"
|
|
];
|
|
|
|
configureFlags = [
|
|
"--enable-parser-generation"
|
|
"--disable-doxygen-doc"
|
|
"--with-curl=${curl.dev}"
|
|
"--with-libxml=${libxml2.dev}"
|
|
"--with-lmdb=${lmdb.out}"
|
|
"--with-maxmind=${libmaxminddb}"
|
|
"--with-pcre=${pcre.dev}"
|
|
"--with-pcre2=${pcre2.out}"
|
|
"--with-ssdeep=${ssdeep}"
|
|
];
|
|
|
|
postPatch = ''
|
|
substituteInPlace build/lmdb.m4 \
|
|
--replace "\''${path}/include/lmdb.h" "${lmdb.dev}/include/lmdb.h" \
|
|
--replace "lmdb_inc_path=\"\''${path}/include\"" "lmdb_inc_path=\"${lmdb.dev}/include\""
|
|
substituteInPlace build/pcre2.m4 \
|
|
--replace "/usr/local/pcre2" "${pcre2.out}/lib" \
|
|
--replace "\''${path}/include/pcre2.h" "${pcre2.dev}/include/pcre2.h" \
|
|
--replace "pcre2_inc_path=\"\''${path}/include\"" "pcre2_inc_path=\"${pcre2.dev}/include\""
|
|
substituteInPlace build/ssdeep.m4 \
|
|
--replace "/usr/local/libfuzzy" "${ssdeep}/lib" \
|
|
--replace "\''${path}/include/fuzzy.h" "${ssdeep}/include/fuzzy.h" \
|
|
--replace "ssdeep_inc_path=\"\''${path}/include\"" "ssdeep_inc_path=\"${ssdeep}/include\""
|
|
substituteInPlace modsecurity.conf-recommended \
|
|
--replace "SecUnicodeMapFile unicode.mapping 20127" "SecUnicodeMapFile $out/share/modsecurity/unicode.mapping 20127"
|
|
'';
|
|
|
|
postInstall = ''
|
|
mkdir -p $out/share/modsecurity
|
|
cp ${src}/{AUTHORS,CHANGES,LICENSE,README.md,modsecurity.conf-recommended,unicode.mapping} $out/share/modsecurity
|
|
'';
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
passthru.tests = {
|
|
nginx-modsecurity = nixosTests.nginx-modsecurity;
|
|
};
|
|
|
|
meta = with lib; {
|
|
homepage = "https://github.com/owasp-modsecurity/ModSecurity";
|
|
description = ''
|
|
ModSecurity v3 library component.
|
|
'';
|
|
longDescription = ''
|
|
Libmodsecurity is one component of the ModSecurity v3 project. The
|
|
library codebase serves as an interface to ModSecurity Connectors taking
|
|
in web traffic and applying traditional ModSecurity processing. In
|
|
general, it provides the capability to load/interpret rules written in
|
|
the ModSecurity SecRules format and apply them to HTTP content provided
|
|
by your application via Connectors.
|
|
'';
|
|
license = licenses.asl20;
|
|
platforms = platforms.all;
|
|
maintainers = with maintainers; [ izorkin ];
|
|
mainProgram = "modsec-rules-check";
|
|
};
|
|
}
|