modsecurity-crs-docker

modsecurity-crs-docker copied to clipboard

Running with non-root access with the nginx user

6

If anyone else is wondering how to use this image for in a non-root context then what worked for me in the Dockerfile: ``` ... # chown all modsecurity and...

archletekke

500 error for big request body without files on Apache

1

I have a form which submits base64 images, so the request body size is somewhere in the 8Mb. If I don't specify `MODSEC_REQ_BODY_NOFILES_LIMIT` with a big number, then I will...

igoooor

Look on how to retain older images in case latest is broken

15

From #62 , we should investigate if we can have old images laying around in hub. ``` Unfortunately, all images on docker-hub (see: https://hub.docker.com/r/owasp/modsecurity-crs/tags) have just been overridden and it...

fzipi

Currently the `SecDisableBackendCompression` option is completely unavailable, even though CRS requires it to be `On` by default. This PR fixes that. I've left out NGINX since it only supports V3...

karelorigin

owasp/modsecurity-crs:{nginx/apache} as a standalone webserver

5

Hello, I am getting hard to run a quick apache/nginx webserver + waf for demonstration purposes, I would prefer to use owasp/modsecurity image as a standalone server rather than a...

Captainzalad

sed error when running container with non-root user

6

A sed-command error appears when starting the container with non-root user. ```bash sed: cannot rename /etc/modsecurity.d/owasp-crs/sedoXeakT: Operation not permitted ``` I've tried to avoid that error using `chmod -R 777`...

lasperr

Consider adding docker security scanner?

10

We may want to add an action for docker security scanning: https://github.com/phonito/phonito-scanner-action

fzipi

context deadline exceeded (Client.Timeout exceeded while awaiting headers)

5

Hello, I am using `owasp/modsecurity-crs:apache-alpine` in my kubernetes cluster. The image is configured in a `Deployment` and I have the following liveness & readiness defined: ``` readinessProbe: httpGet: path: /healthz...

igoooor

theseion

Fixing part 7.12 of CIS Apache Benchmark - removing non-forward secrecy ciphers

3

Removing these non-forward secrecy ciphers from Apache configuration: ``` ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ```

azurit