nginx-owasp-crs

OWASP ModSecurity Core Rule Set for Nginx

License: Apache-2.0 https://github.com/coreruleset/coreruleset

Availability

Distro	aarch64	noarch	x86_64	Version
RHEL 10	—	✓	—	4.24.1
RHEL 9	—	✓	—	4.24.1
RHEL 8	—	✓	—	4.24.1
RHEL 7	—	✓	—	4.24.1
RHEL 6	—	✓	—	3.2.0

Description

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.

Compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.

Install

CentOS/RHEL 10

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install nginx-owasp-crs

CentOS/RHEL 9

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install nginx-owasp-crs

CentOS/RHEL 8

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install nginx-owasp-crs

CentOS/RHEL 7

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo yum -y install https://epel.cloud/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum -y install nginx-owasp-crs

CentOS/RHEL 6

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo yum -y install nginx-owasp-crs