I re-enabled modsecurity, this time with the PCRE JIT.<\/p>\n
To do this I had to do the following:<\/p>\n
Build the latest version of pcre.
\nInstall it in \/usr\/local\/pcre<\/p>\n
Modify the apache startup to use LD_PRELOAD to load the new libpcre.so instead of the standard system one.
\nI could have overwritten this using ld.so.preload but that’s a system-wide changes and I don’t know what else I might break, seeing as most other things will be compiled against the old version.<\/p>\n
Finally I had to modify the apache2 binary so that it’s allowed to create code at runtime (we are doing JIT here, afterall)<\/p>\n
paxctl -cm \/usr\/lib\/apache2\/mpm-prefork\/apache2<\/p>\n
Now it seems to be working fine.<\/p>\n
PCRE was compiled like so:<\/p>\n
.\/configure –prefix=\/usr\/local\/pcre –enable-jit –enable-pcre16 –enable-pcre32 –enable-utf –enable-unicode-properties –disable-static<\/p>\n","protected":false},"excerpt":{"rendered":"
I re-enabled modsecurity, this time with the PCRE JIT. To do this I had to do the following: Build the latest version of pcre. Install it in \/usr\/local\/pcre Modify the apache startup to use LD_PRELOAD to load the new libpcre.so instead of the standard system one. I could have overwritten this using ld.so.preload but that’s […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33,18,10],"tags":[49,21,20],"class_list":["post-49","post","type-post","status-publish","format-standard","hentry","category-computers","category-security","category-technical","tag-apache","tag-linux","tag-security"],"_links":{"self":[{"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/posts\/49","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/comments?post=49"}],"version-history":[{"count":1,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/posts\/49\/revisions"}],"predecessor-version":[{"id":50,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/posts\/49\/revisions\/50"}],"wp:attachment":[{"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/media?parent=49"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/categories?post=49"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/micro.muppetz.com\/blog\/wp-json\/wp\/v2\/tags?post=49"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}