1

I am running a host and just updated mod_security. It "broke" a CMS in multiple sites. I want to white list all sub-directories named CMS. How do I specify a rule to do that?

kylex
  • 1,421
  • 5
  • 14
  • 18

2 Answers2

5
<Directory /path/to/dir>
SecRuleEngine Off
</Directory>
quaie
  • 1,122
  • 6
  • 14
  • but this is just for a single directory... what if i want a bunch of directories that are named CMS? like /path/to/CMS /another/path/CMS /yetanother/CMS – kylex Sep 24 '09 at 03:11
  • I don;t think regex are allowed in apache cfg files, though wildcard works; search in this direction – quaie Sep 24 '09 at 11:49
  • `` and `` support regular expressions, see http://httpd.apache.org/docs/2.2/mod/core.html#directorymatch – joschi Aug 16 '10 at 06:42
0

See this wiki page for examples:

http://www.atomicorp.com/wiki/index.php/Mod_security