Today i've installed the module mod_security in my LAMP STACK; there are some few prerequisites:
libapr and libapr-util $ apt-get install libapr1 libapr1-dev libaprutil1 libaprutil1-dev
libpcre
$ apt-get install libpcre3 libpcre3-dev
libz (in Bitnami LampStack this library is called 'zlib1g-dev' instead of 'libz-dev') $ sudo apt-get install libz-dev
libxml2 $ apt-get install libxml2 libxml2-dev
liblua $ apt-get install liblua5.1-0 liblua5.1-0-dev
libcurl $ apt-get install libcurl4-openssl-dev libcurl3-dbg
libc6 $ sudo apt-get install libc6
the apache develop libraries: $ apt-get install apache2-dev
the develop tools $ apt-get install build-essential
the Perl prerequisites $ apt-get install liblwp-useragent-determined-perl libgnupg-perl libcrypt-ssleay-perl
the mod_uniqueid must be enabled $ a2enmod unique_id
etc. etc. - who wants to have more details can follow this tutorial here: http://www.azns.it/2012/01/04/rendiamo-sicuro-apache-con-mod_security/ (it is in Italian but it is very comprehensive) - I make it short. I've a problem withe the libxml2, when i try to load it in httpd.conf with a: " LoadFile /usr/lib64/libxml2.so " and i restart apache I see this error message:
Cannot load /usr/lib64/libxml2.so into server: /usr/lib64/libxml2.so: undefined symbol: gzopen64 apache config test fails, aborting
I'm not the only one that have experienced this error https://www.google.it/search?q=gzopen64+mod_security so I've found here a workaround: http://www.spiration.co.uk/post/1446//usr/lib/libxml2.so.2:-undefined-symbol:-gzopen64 but in Bitnami LampStack the libz library is called 'zlib1g-dev' instead of 'libz-dev' so I can't find the installation dir of that library and consequently I can't try the workaround .
Has anyone of you ever faced this problem?