1

I am running a host and just updated mod_security. It "broke" a CMS in multiple sites. I want to white list all sub-directories named CMS. How do I specify a rule to do that?

Improve this question

2 Answers 2

Reset to default
5 
<Directory /path/to/dir>
SecRuleEngine Off
</Directory>
Improve this answer
3
  • but this is just for a single directory... what if i want a bunch of directories that are named CMS? like /path/to/CMS /another/path/CMS /yetanother/CMS
    – kylex
    Sep 24, 2009 at 3:11
  • I don;t think regex are allowed in apache cfg files, though wildcard works; search in this direction
    – quaie
    Sep 24, 2009 at 11:49
  • <Directory> and <DirectoryMatch> support regular expressions, see httpd.apache.org/docs/2.2/mod/core.html#directorymatch
    – joschi
    Aug 16, 2010 at 6:42
0

See this wiki page for examples:

http://www.atomicorp.com/wiki/index.php/Mod_security

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .