- use modsecurity.conf-minimal by default with the rest of base rules, - set SecDataDir to /var/run/httpd, package *.data files, - S: apache-mod_headers for crs_49_header_tagging, rel. 3 Changed files: apache-mod_security.conf -> 1.5 apache-mod_security.spec -> 1.32