Still a work in progress, but we've started on what I call "ASL Lite"  which is (currently) a standalone updater for rules. Its the first step for getting a cross platform "installation neutral" component that can be used to update rules (mod_security in this case) regardless of the OS or the control panel. Right now this means we have something to marry with the rules-only feed as a rule updater, and long term provides a platform for supporting custom environments (cpanel, directadmin, fill-in-the-blank...). 

At this point ASL Lite can:

1) Configure itself (just like asl -c), which includes a basic mod_security rules dialog

2) Check for updates from the update server (like asl -ck)

3) Download updates and install the sub-components  (in this case rule classes) to the designated directory.

We've also got basic configuration "smoke tests" to ensure that the custom environment has the support packages for each rule class to work. In full ASL this is already done using package management, but in a Lite (aka cpanel, directadmin, source installs, etc) environment you're in a situation where you have to interogate the box many different ways to ensure everything is there and configured in a usable way. 

One lesson learned from early plesk development  (pre-2.0) that we're not going to repeat with ASL is to let this approach get out of hand, or you end up with this big monolithic mess that requires an army to maintain. We couldn't do that anyway... we don't have an army :P

Only registered users can write comments.
Please login or register.

Powered by AkoComment 2.0.3!