I was trying to secure my server (apache 2.4.6 on centos 7) with mod_security and OWASP, but after following the instructions and installing OWASP, httpd fails to start with following error message:
Apr 16 02:59:24 systemd[1]: Starting The Apache HTTP Server...
Apr 16 02:59:24 httpd[8289]: AH00526: Syntax error on line 56 of /etc/httpd/modsecurity.d/owasp-modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf:
Apr 16 02:59:24 httpd[8289]: Error creating rule: Failed to resolve operator: detectXSS
Apr 16 02:59:24 systemd[1]: httpd.service: main process exited, code=exited, status=1/FAILURE
Apr 16 02:59:24 kill[8291]: kill: cannot find process ""
Apr 16 02:59:24 systemd[1]: httpd.service: control process exited, code=exited status=1
Apr 16 02:59:24 systemd[1]: Failed to start The Apache HTTP Server.
I know there's a similar problem with older mod_secure versions, however, mine is up to date (2.7.3)
Anyone has any idea how to deal with this?