After 3.0.9 is it impossible to include configs by wildcard mask. · Issue #2905 · owasp-modsecurity/ModSecurity (original) (raw)

Describe the bug

After 3.0.9 is it impossible to include configs by wildcard mask. Works well on 3.0.8.

Logs and dumps

2023/05/18 15:12:16 [emerg] 1#1: "modsecurity_rules_file" directive Rules error. File: /etc/nginx/modsec/main.conf. Line: 3. Column: 55. "/usr/local/owasp-modsecurity-crs/rules/*.conf": Not able to open file. Looking at: '"/usr/local/owasp-modsecurity-crs/rules/*.conf"', '"/usr/local/owasp-modsecurity-crs/rules/*.conf"', '/etc/nginx/modsec/"/usr/local/owasp-modsecurity-crs/rules/*.conf"', '/etc/nginx/modsec/"/usr/local/owasp-modsecurity-crs/rules/*.conf"'. in /etc/nginx/nginx.conf:21
nginx: [emerg] "modsecurity_rules_file" directive Rules error. File: /etc/nginx/modsec/main.conf. Line: 3. Column: 55. "/usr/local/owasp-modsecurity-crs/rules/*.conf": Not able to open file. Looking at: '"/usr/local/owasp-modsecurity-crs/rules/*.conf"', '"/usr/local/owasp-modsecurity-crs/rules/*.conf"', '/etc/nginx/modsec/"/usr/local/owasp-modsecurity-crs/rules/*.conf"', '/etc/nginx/modsec/"/usr/local/owasp-modsecurity-crs/rules/*.conf"'. in /etc/nginx/nginx.conf:21

To Reproduce

Just type set this in config
Include "/usr/local/owasp-modsecurity-crs/rules/*.conf"

Expected behavior

All configs are included.

Server (please complete the following information):

• ModSecurity version ModSecurity v3.0.9
• WebServer: nginx-1.24.0
• OS (and distro): nginx docker image

Rule Set (please complete the following information):

• Running any public or commercial rule set? Public ruleset https://github.com/coreruleset/coreruleset.git
• What is the version number? v3.3.4