github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-15 23:55:03 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adds "matched" line to the audit logs

Browse Source
This commit is contained in:
Felipe Zimmerle 2016-02-12 13:28:43 -03:00
parent 362b376acb
commit a2ffb36159
3 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
headers/modsecurity/rule.h
View File

@ -102,6 +102,7 @@ class RuleMessage {
m_ver = rule->m_ver; m_ver = rule->m_ver;
m_maturity = rule->m_maturity; m_maturity = rule->m_maturity;
m_rule = rule; m_rule = rule;
m_match = std::string("");
}; };
RuleMessage(Rule *rule, std::string message) { RuleMessage(Rule *rule, std::string message) {
m_ruleFile = rule->m_fileName; m_ruleFile = rule->m_fileName;
@ -115,6 +116,7 @@ class RuleMessage {
m_ver = rule->m_ver; m_ver = rule->m_ver;
m_maturity = rule->m_maturity; m_maturity = rule->m_maturity;
m_rule = rule; m_rule = rule;
m_match = std::string("");
}; };
std::string m_match; std::string m_match;

4
src/rule.cc
View File

@ -391,6 +391,10 @@ bool Rule::evaluate(Transaction *trasn) {
if (ret) { if (ret) {
bool containsDisruptive = false; bool containsDisruptive = false;
bool chainResult = false; bool chainResult = false;
ruleMessage->m_match = "Operator `" + this->op->op +
"' with parameter `" + this->op->param + "' against" \
" variable `" + v->m_key + "' (Value: `" + value + "' )";
#ifndef NO_LOGS #ifndef NO_LOGS
trasn->debug(4, "Rule returned 1."); trasn->debug(4, "Rule returned 1.");
#endif #endif

1
src/transaction.cc
View File

@ -1542,6 +1542,7 @@ std::string Transaction::toJSON(int parts) {
reinterpret_cast<const unsigned char*>("producer"), reinterpret_cast<const unsigned char*>("producer"),
strlen("producer")); strlen("producer"));
yajl_gen_map_open(g); yajl_gen_map_open(g);
LOGFY_ADD("match", a->m_match.c_str());
LOGFY_ADD("ruleId", std::to_string(a->m_ruleId).c_str()); LOGFY_ADD("ruleId", std::to_string(a->m_ruleId).c_str());
LOGFY_ADD("file", a->m_ruleFile.c_str()); LOGFY_ADD("file", a->m_ruleFile.c_str());
LOGFY_ADD("lineNumber", std::to_string(a->m_ruleLine).c_str()); LOGFY_ADD("lineNumber", std::to_string(a->m_ruleLine).c_str());