Having exec working with scripts other than lua

[zimmerle]

Version 3 supports the exec action, but it is only supporting Lua script.

As per the manual state, the exec action should also support other kinds of scripts or elfs.

The manual entry that describes the exec action: ModSecurity Reference Manual#exec

Here we can find the current code for the exec action on v3 -
https://github.com/SpiderLabs/ModSecurity/blob/d5b93c1013ca9c9a96c75369576b54832e9a2b48/src/actions/exec.cc#L1-L10

[zimmerle]

Reference to v2 code -
https://github.com/SpiderLabs/ModSecurity/blob/176276a931a6d61db38b908237c9aad1cea0d6ad/apache2/re_actions.c#L2219-L2244

[gfranco93]

Any news on this?

[zimmerle]

Hi @gfranco93,

Not yet. Sorry.

[MrMorice]

Hi Felipe @zimmerle,

do you have any update on when this will be fixed in v3? We would love to introduce ModSecurity but need this to review rules in Setry. Great piece of software!

Best, Moritz

[zimmerle]

Hey @MrMorice,

thank you!!

Unfortunately, the code is not yet ready. As an alternative, you can try to use: @InspectFile. There is an option to run the operator as a chained rule. Depending on the use case scenario you may be able to accomplish the same functionality.

[MrMorice]

Hey @zimmerle,

that sounds good, indeed! Thank you very much!