github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-09-29 11:16:33 +03:00
Code Issues Packages Projects Releases Wiki Activity

Changes the saving selection for the audit logs

Browse Source
This commit is contained in:
Felipe Zimmerle
2016-12-20 09:23:57 -03:00
parent 10cdf8fed9
commit bbb61d560c
9 changed files with 28 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
headers/modsecurity/rule_message.h
View File

@@ -47,6 +47,7 @@ class RuleMessage {
m_maturity(rule->m_maturity),
m_rule(rule),
m_saveMessage(false),
m_noAuditLog(false),
m_match(std::string(""))
{ }
@@ -70,6 +71,7 @@ class RuleMessage {
std::list<std::string> m_tags;
std::list<std::string> m_server_logs;
bool m_noAuditLog;
Rule *m_rule;
bool m_saveMessage;
};

19
headers/modsecurity/transaction.h
View File

@@ -165,25 +165,6 @@ class Transaction {
std::string toOldAuditLogFormatIndex(const std::string &filename,
double size, const std::string &md5);
/**
* This variable is basically set by the `autidlog' action. It means
* that this particular transaction was marked to be saved as part of
* the auditlogs, even if it is not originally classified to be saved
* by `SecAuditLogRelevantStatus'.
*/
bool m_toBeSavedInAuditlogs;
/**
* Set by `noauditlog' action, it means that this particular should
* not be saved. Regardless of `SecAuditLogRelevantStatus'.
*
* @note It is possible to have `auditlog' and `noauditlog' actions
* in a same rule, in that case prevails the last input.
*/
bool m_toNotBeSavedInAuditLogs;
/**
* Filled during the class instantiation, this variable can be later
* used to fill the SecRule variable `duration'. The variable `duration'