Merge pull request #292 from Dr-Lazarus-V2/patch-3

fix: modify Nginx Dockerfile to address OWASP ModSecurity Issue #2041
coreruleset · Oct 3, 2024 · 37d99ea · 37d99ea
2 parents 443a1a7 + 1acb04c
commit 37d99ea
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/nginx/Dockerfile b/nginx/Dockerfile
@@ -21,7 +21,6 @@ RUN set -eux; \
         git \
         libcurl4-gnutls-dev \
         libfuzzy-dev \
-        libgeoip-dev \
         liblua${LUA_VERSION}-dev \
         libpcre3-dev \
         libpcre2-dev \
@@ -51,7 +50,7 @@ RUN set -eux; \
     sed -ie "s/i386-linux-gnu/${ARCH}/g" build/ssdeep.m4; \
     sed -ie "s/i386-linux-gnu/${ARCH}/g" build/pcre2.m4; \
     ./build.sh; \
-    ./configure --with-yajl --with-ssdeep --with-geoip --with-pcre2 --with-maxmind --enable-silent-rules; \
+    ./configure --with-yajl --with-ssdeep --with-pcre2 --with-maxmind --enable-silent-rules; \
     make install; \
     strip /usr/local/modsecurity/lib/lib*.so*
 

diff --git a/nginx/Dockerfile-alpine b/nginx/Dockerfile-alpine
@@ -18,7 +18,6 @@ RUN set -eux; \
         curl-dev \
         g++ \
         gcc \
-        geoip-dev \
         git \
         libc-dev \
         libfuzzy2-dev \
@@ -48,7 +47,7 @@ RUN set -eux; \
     sed -ie "s/i386-linux-gnu/${ARCH}/g" build/ssdeep.m4; \
     sed -ie "s/i386-linux-gnu/${ARCH}/g" build/pcre2.m4; \
     ./build.sh; \
-    ./configure --with-yajl --with-ssdeep --with-lmdb --with-geoip --with-pcre2 --with-maxmind --enable-silent-rules; \
+    ./configure --with-yajl --with-ssdeep --with-lmdb --with-pcre2 --with-maxmind --enable-silent-rules; \
     make install; \
     strip /usr/local/modsecurity/lib/lib*.so*