mod_security rpm installation

[poppy]

CENTOS 5.5 x86_64 with cPanel

I am trying to install the atomicorp mod_security module from within WHM software section. I have added the atomic repo, but when I install mod_security from there I get the error that I have pasted at the end of this post.

I have tried doing the thing suggested at the bottom of the error message, but still I get the same problem. Is my servers setup not able to use atomicorp's mod_security package, do I have to use the easy apache installation option instead?

Code: Select all

Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * addons: yum.singlehop.com
 * atomic: www3.atomicorp.com
 * base: centos.cs.wisc.edu
 * extras: centos.corenetworks.net
 * updates: mirror.fdcservers.net
Excluding Packages in global exclude list
Finished
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package mod_security.x86_64 0:2.5.11-1.el5.art set to be updated
--> Processing Dependency: httpd-mmn = 20051115 for package: mod_security
--> Processing Dependency: httpd for package: mod_security
--> Processing Dependency: lua for package: mod_security
--> Running transaction check
---> Package lua.x86_64 0:5.1.4-1.el5.art set to be updated
---> Package mod_security.x86_64 0:2.5.11-1.el5.art set to be updated
--> Processing Dependency: httpd-mmn = 20051115 for package: mod_security
--> Processing Dependency: httpd for package: mod_security
--> Finished Dependency Resolution
mod_security-2.5.11-1.el5.art.x86_64 from atomic has depsolving problems
  --> Missing Dependency: httpd-mmn = 20051115 is needed by package mod_security-2.5.11-1.el5.art.x86_64 (atomic)
mod_security-2.5.11-1.el5.art.x86_64 from atomic has depsolving problems
  --> Missing Dependency: httpd is needed by package mod_security-2.5.11-1.el5.art.x86_64 (atomic)
Error: Missing Dependency: httpd is needed by package mod_security-2.5.11-1.el5.art.x86_64 (atomic)
Error: Missing Dependency: httpd-mmn = 20051115 is needed by package mod_security-2.5.11-1.el5.art.x86_64 (atomic)
 You could try using --skip-broken to work around the problem
 You could try running: package-cleanup --problems
                        package-cleanup --dupes
                        rpm -Va --nofiles --nodigest

[scott]

yes you'll need to use that, since they dont use package management in that environment. I'd also recommend that if you're building from source you add our patches and compile it the same way we do to avoid pcre limits. You can see the spec file here:

http://www4.atomicorp.com/channels/sour ... urity.spec

And grab our patches from the src.rpm here:
http://www4.atomicorp.com/channels/sour ... rt.src.rpm

[poppy]

Thankyou I will try that. I have been trying to install the gotroot rules with the easy apache version of modsec, but cant seem to get them working, I am not sure what I am doing wrong, but am thinking maybe I will have more luck with a different version of mod_sec

As a side note, I previously ran the following command on the system,

wget -q -O - http://www.atomicorp.com/installers/atomic | sh

and am able to view the atomic rpms in WHM yum install rpm list, how do I remove them from the list? Will all of them be unsuitable for this server environment?

[scott]

I'll throw out a "That Depends" there Atomic and ASL are designed to integrate with the packages distributed from the vendor (centos/fedora/redhat). Cpanel does integrate with some packages with the vendor, and sometimes they compile their own. Its probably better to ask them which packages you can upgrade safely and which ones you can't with their system.

[poppy]

Thanks!
Is there a way I can undo what I did when i ran the installer command, to remove the rpms that now show up in the list along with the cpanel ones?