Skip to content

Update information about mod_security #4992

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
cg-tw wants to merge 14 commits into
base: staging
Choose a base branch
from
+808 −24
Open

Update information about mod_security #4992

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
824e427
Update information about mod_security
cg-tw Jan 22, 2026
18d5108
Update secure-platform.md
cg-tw Jan 22, 2026
e03992e
Update secure-platform.md
cg-tw Jan 22, 2026
56a074c
Update secure-platform.md
cg-tw Jan 22, 2026
7c7f11b
Update secure-platform.md
cg-tw Jan 22, 2026
eae995f
Update secure-platform.md
cg-tw Jan 22, 2026
0f35519
Update secure-platform.md
cg-tw Jan 22, 2026
403e735
Update secure-platform.md
cg-tw Jan 22, 2026
cea8647
Update secure-platform.md
cg-tw Jan 22, 2026
22ef01a
Update secure-platform.md
cg-tw Jan 22, 2026
5c52c1d
Update secure-platform.md
cg-tw Jan 22, 2026
a5a45ad
Update secure-platform.md
cg-tw Jan 23, 2026
01fb6d1
Update secure-platform.md
cg-tw Jan 23, 2026
41c1203
Update secure-platform.md
cg-tw Jan 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
104 changes: 101 additions & 3 deletions .../docusaurus-plugin-content-docs/version-24.04/administration/secure-platform.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -655,7 +655,7 @@ Maintenant que vous avez votre certificat auto-signé, vous pouvez suivre la pro
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
dnf install mod_ssl mod_security openssl
dnf install mod_ssl openssl
```

2. Installez les certificats :
Expand All @@ -672,7 +672,7 @@ cp ca_demo.crt /etc/pki/tls/certs/
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
dnf install mod_ssl mod_security openssl
dnf install mod_ssl openssl
```

2. Installez les certificats :
Expand All @@ -691,7 +691,6 @@ cp ca_demo.crt /etc/pki/tls/certs/
```shell
curl -sSL https://packages.sury.org/apache2/README.txt | sudo bash -x
apt update
apt install libapache2-mod-security2
a2enmod ssl
a2enmod security2
systemctl restart apache2
Expand Down Expand Up @@ -1551,6 +1550,105 @@ systemctl restart apache2
</TabItem>
</Tabs>

## Activer mod_security

**mod_security** est un module de sécurité pour Apache qui agit comme un pare-feu d'applications web (WAF).

1. Installez **mod_security** :

<Tabs groupId="sync">
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
dnf install mod_security
```

</TabItem>
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
dnf install mod_security
```

</TabItem>
<TabItem value="Debian 12" label="Debian 12">

```shell
apt install libapache2-mod-security2
```

</TabItem>
</Tabs>

2. Éditez le fichier suivant et adaptez les paramètres selon votre choix :

<Tabs groupId="sync">
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
/etc/httpd/conf.d/mod_security.conf
```

</TabItem>
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
/etc/httpd/conf.d/mod_security.conf
```

</TabItem>
<TabItem value="Debian 12" label="Debian 12">

```shell
/etc/modsecurity/mod_security.conf
```

</TabItem>
</Tabs>

Nous recommandons la configuration suivante :

```text
SecResponseBodyAccess Off
SecDebugLog /var/log/httpd/modsec_debug.log
SecDebugLogLevel 0
SecAuditEngine RelevantOnly
SecAuditLogRelevantStatus "^(?:5|4(?!01|4))"
SecAuditLogParts ABJDEFHZ
SecAuditLogType Serial
SecAuditLog /var/log/httpd/modsec_audit.log
SecArgumentSeparator &
SecCookieFormat 0
SecTmpDir /var/lib/mod_security
SecDataDir /var/lib/mod_security
```

3. Redémarrez Apache :

<Tabs groupId="sync">
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
systemctl restart httpd
```

</TabItem>
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
systemctl restart httpd
```

</TabItem>
<TabItem value="Debian 12" label="Debian 12">

```shell
systemctl restart apache2
```

</TabItem>
</Tabs>

## Ajoutez votre certificat à votre navigateur

Si vous utilisez un certificat qui n'est pas fourni par une autorité de confiance, vous devez importer le certificat CA dans votre navigateur.
Expand Down
104 changes: 101 additions & 3 deletions .../docusaurus-plugin-content-docs/version-24.10/administration/secure-platform.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -655,7 +655,7 @@ Maintenant que vous avez votre certificat auto-signé, vous pouvez suivre la pro
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
dnf install mod_ssl mod_security openssl
dnf install mod_ssl openssl
```

2. Installez les certificats :
Expand All @@ -672,7 +672,7 @@ cp ca_demo.crt /etc/pki/tls/certs/
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
dnf install mod_ssl mod_security openssl
dnf install mod_ssl openssl
```

2. Installez les certificats :
Expand All @@ -691,7 +691,6 @@ cp ca_demo.crt /etc/pki/tls/certs/
```shell
curl -sSL https://packages.sury.org/apache2/README.txt | sudo bash -x
apt update
apt install libapache2-mod-security2
a2enmod ssl
a2enmod security2
systemctl restart apache2
Expand Down Expand Up @@ -1549,6 +1548,105 @@ systemctl restart apache2
</TabItem>
</Tabs>

## Activer mod_security

**mod_security** est un module de sécurité pour Apache qui agit comme un pare-feu d'applications web (WAF).

1. Installez **mod_security** :

<Tabs groupId="sync">
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
dnf install mod_security
```

</TabItem>
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
dnf install mod_security
```

</TabItem>
<TabItem value="Debian 12" label="Debian 12">

```shell
apt install libapache2-mod-security2
```

</TabItem>
</Tabs>

2. Éditez le fichier suivant et adaptez les paramètres selon votre choix :

<Tabs groupId="sync">
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
/etc/httpd/conf.d/mod_security.conf
```

</TabItem>
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
/etc/httpd/conf.d/mod_security.conf
```

</TabItem>
<TabItem value="Debian 12" label="Debian 12">

```shell
/etc/modsecurity/mod_security.conf
```

</TabItem>
</Tabs>

Nous recommandons la configuration suivante :

```text
SecResponseBodyAccess Off
SecDebugLog /var/log/httpd/modsec_debug.log
SecDebugLogLevel 0
SecAuditEngine RelevantOnly
SecAuditLogRelevantStatus "^(?:5|4(?!01|4))"
SecAuditLogParts ABJDEFHZ
SecAuditLogType Serial
SecAuditLog /var/log/httpd/modsec_audit.log
SecArgumentSeparator &
SecCookieFormat 0
SecTmpDir /var/lib/mod_security
SecDataDir /var/lib/mod_security
```

3. Redémarrez Apache :

<Tabs groupId="sync">
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
systemctl restart httpd
```

</TabItem>
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
systemctl restart httpd
```

</TabItem>
<TabItem value="Debian 12" label="Debian 12">

```shell
systemctl restart apache2
```

</TabItem>
</Tabs>

## Ajoutez votre certificat à votre navigateur
Si vous utilisez un certificat qui n'est pas fourni par une autorité de confiance, vous devez importer le certificat CA dans votre navigateur.

Expand Down
104 changes: 101 additions & 3 deletions .../docusaurus-plugin-content-docs/version-25.10/administration/secure-platform.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -655,7 +655,7 @@ Maintenant que vous avez votre certificat auto-signé, vous pouvez suivre la pro
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
dnf install mod_ssl mod_security openssl
dnf install mod_ssl openssl
```

2. Installez les certificats :
Expand All @@ -672,7 +672,7 @@ cp ca_demo.crt /etc/pki/tls/certs/
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
dnf install mod_ssl mod_security openssl
dnf install mod_ssl openssl
```

2. Installez les certificats :
Expand All @@ -691,7 +691,6 @@ cp ca_demo.crt /etc/pki/tls/certs/
```shell
curl -sSL https://packages.sury.org/apache2/README.txt | sudo bash -x
apt update
apt install libapache2-mod-security2
a2enmod ssl
a2enmod security2
systemctl restart apache2
Expand Down Expand Up @@ -1549,6 +1548,105 @@ systemctl restart apache2
</TabItem>
</Tabs>

## Activer mod_security

**mod_security** est un module de sécurité pour Apache qui agit comme un pare-feu d'applications web (WAF).

1. Installez **mod_security** :

<Tabs groupId="sync">
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
dnf install mod_security
```

</TabItem>
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
dnf install mod_security
```

</TabItem>
<TabItem value="Debian 12" label="Debian 12">

```shell
apt install libapache2-mod-security2
```

</TabItem>
</Tabs>

2. Éditez le fichier suivant et adaptez les paramètres selon votre choix :

<Tabs groupId="sync">
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
/etc/httpd/conf.d/mod_security.conf
```

</TabItem>
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
/etc/httpd/conf.d/mod_security.conf
```

</TabItem>
<TabItem value="Debian 12" label="Debian 12">

```shell
/etc/modsecurity/mod_security.conf
```

</TabItem>
</Tabs>

Nous recommandons la configuration suivante :

```text
SecResponseBodyAccess Off
SecDebugLog /var/log/httpd/modsec_debug.log
SecDebugLogLevel 0
SecAuditEngine RelevantOnly
SecAuditLogRelevantStatus "^(?:5|4(?!01|4))"
SecAuditLogParts ABJDEFHZ
SecAuditLogType Serial
SecAuditLog /var/log/httpd/modsec_audit.log
SecArgumentSeparator &
SecCookieFormat 0
SecTmpDir /var/lib/mod_security
SecDataDir /var/lib/mod_security
```

3. Redémarrez Apache :

<Tabs groupId="sync">
<TabItem value="Alma / RHEL / Oracle Linux 8" label="Alma / RHEL / Oracle Linux 8">

```shell
systemctl restart httpd
```

</TabItem>
<TabItem value="Alma / RHEL / Oracle Linux 9" label="Alma / RHEL / Oracle Linux 9">

```shell
systemctl restart httpd
```

</TabItem>
<TabItem value="Debian 12" label="Debian 12">

```shell
systemctl restart apache2
```

</TabItem>
</Tabs>

## Ajoutez votre certificat à votre navigateur

Si vous utilisez un certificat qui n'est pas fourni par une autorité de confiance, vous devez importer le certificat CA dans votre navigateur.
Expand Down
Loading