Configuring Mod_security with Oracle HTTP Server 11g

(Doc ID 1308979.1)

Last updated on JANUARY 12, 2017

Applies to:

Oracle HTTP Server - Version 11.1.1.1.0 to 11.1.1.6.0 [Release Oracle11g]
Oracle Fusion Middleware - Version 11.1.1.1.0 to 11.1.1.6.0 [Release Oracle11g]
Information in this document applies to any platform.

Goal

Mod_security was not provided with Oracle HTTP Server (OHS) in Fusion Middleware 11g prior to 11.1.1.6.
This is documented in following Admin guide:

Oracle Fusion Middleware Administrator's Guide for Oracle HTTP Server
11g Release 1 (11.1.1) Part Number E10144-04
 -> 3 Understanding Oracle HTTP Server Modules
  -> 3.1 List of Included Modules
http://download.oracle.com/docs/cd/E17904_01/web.1111/e10144/under_mods.htm#BABCGIHJ

Mod_security was mistakenly listed as an included module in Admin guides prior to 11.1.1.4, but this was corrected from version 11.1.1.4 documentation onward.

This note provide details on Oracle specific changes which is required for compiling mod_security module.
No support is provided for generic mod_security non-oracle configuration steps.
Tested against Fusion Middleware (FMw) 11.1.1.3 on 32bit RHEL 5




Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms