I am running a host and just updated mod_security. It "broke" a CMS in multiple sites. I want to white list all sub-directories named CMS. How do I specify a rule to do that?

link|improve this question

46% accept rate
feedback

2 Answers

<Directory /path/to/dir>
SecRuleEngine Off
</Directory>
link|improve this answer
but this is just for a single directory... what if i want a bunch of directories that are named CMS? like /path/to/CMS /another/path/CMS /yetanother/CMS – kylex Sep 24 '09 at 3:11
I don;t think regex are allowed in apache cfg files, though wildcard works; search in this direction – petre Sep 24 '09 at 11:49
<Directory> and <DirectoryMatch> support regular expressions, see httpd.apache.org/docs/2.2/mod/core.html#directorymatch – joschi Aug 16 '10 at 6:42
feedback

See this wiki page for examples:

http://www.atomicorp.com/wiki/index.php/Mod%5Fsecurity

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.