1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
Source: libapache-mod-security
Section: web
Priority: optional
Maintainer: Alberto Gonzalez Iniesta <agi@inittab.org>
Build-Depends: debhelper (>> 4.0.0), apache-dev (>= 1.3.28), apache2-threaded-dev (>= 2.0.50-10)
Standards-Version: 3.6.1
Package: libapache-mod-security
Architecture: any
Depends: mod-security-common (= ${Source-Version}), apache-common (>= 1.3.28), ${shlibs:Depends}
Description: Tighten web applications security for Apache 1.x
Mod_security is an Apache 1.x/2.x module whose purpose is to tighten the Web
application security. Effectively, it is an intrusion detection and prevention
system for the web server.
.
At the moment its main features are:
* Audit log; store full request details in a separate file, including POST
payloads.
* Request filtering; incoming requests can be analysed and offensive requests
can be rejected (or simply logged, if that is what you want). This feature
can be used to prevent many types of attacks (e.g. XSS attacks, SQL
injection, ...) and even allow you to run insecure applications on your
servers (if you have no other choice, of course).
.
This package contains the module required for Apache 1.x servers.
In addition to this package the mod-security-common package, which includes
documentation and configuration examples, will be installed.
Package: libapache2-mod-security
Architecture: any
Depends: mod-security-common (= ${Source-Version}), apache2-common, ${shlibs:Depends}
Description: Tighten web applications security for Apache 2.x
Mod_security is an Apache 1.x/2.x module whose purpose is to tighten the Web
application security. Effectively, it is an intrusion detection and prevention
system for the web server.
.
At the moment its main features are:
* Audit log; store full request details in a separate file, including POST
payloads.
* Request filtering; incoming requests can be analysed and offensive requests
can be rejected (or simply logged, if that is what you want). This feature
can be used to prevent many types of attacks (e.g. XSS attacks, SQL
injection, ...) and even allow you to run insecure applications on your
servers (if you have no other choice, of course).
.
This package contains the module required for Apache 2.x servers.
In addition to this package the mod-security-common package, which includes
documentation and configuration examples, will be installed.
Package: mod-security-common
Architecture: all
Depends: libapache-mod-security (= ${Source-Version}) | libapache2-mod-security (= ${Source-Version})
Description: Tighten web applications security - common files
Mod_security is an Apache 1.x/2.x module whose purpose is to tighten the Web
application security. Effectively, it is an intrusion detection and prevention
system for the web server.
.
This package includes documentation, configuration examples and some scripts
to test the functionality of the module. You have to install the appropriate
module package according to your apache version: libapache-mod-security for
Apache 1.x or libapache2-mod-security for Apache 2.x
|
