Adds support for Log and Rev actions

This commit is contained in:
Felipe Zimmerle
2015-08-07 02:29:24 -03:00
parent ad9393a8c2
commit c06179f18e
8 changed files with 196 additions and 1 deletions

34
src/actions/log.cc Normal file
View File

@@ -0,0 +1,34 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include "actions/log.h"
#include <iostream>
#include <string>
#include "modsecurity/assay.h"
namespace ModSecurity {
namespace actions {
bool Log::evaluate(Rule *rule, Assay *assay) {
assay->save_in_auditlog = true;
/* FIXME: assay->serverLog("Something...."); */
assay->debug(9, "Saving transaction to logs");
return true;
}
} // namespace actions
} // namespace ModSecurity

42
src/actions/log.h Normal file
View File

@@ -0,0 +1,42 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include <string>
#include "actions/action.h"
#ifndef SRC_ACTIONS_LOG_H_
#define SRC_ACTIONS_LOG_H_
class Assay;
namespace ModSecurity {
class Assay;
namespace actions {
class Log : public Action {
public:
explicit Log(std::string action)
: Action(action, RunTimeOnlyIfMatchKind) { }
bool evaluate(Rule *rule, Assay *assay) override;
};
} // namespace actions
} // namespace ModSecurity
#endif // SRC_ACTIONS_LOG_H_

44
src/actions/rev.cc Normal file
View File

@@ -0,0 +1,44 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include "actions/rev.h"
#include <iostream>
#include <string>
#include "actions/action.h"
#include "modsecurity/assay.h"
#include "src/utils.h"
#include "src/rule.h"
#include "src/macro_expansion.h"
namespace ModSecurity {
namespace actions {
Rev::Rev(std::string action)
: Action(action, ConfigurationKind),
m_rev(action) {
m_rev.erase(0, 1);
m_rev.pop_back();
}
bool Rev::evaluate(Rule *rule, Assay *assay) {
rule->rev = m_rev;
return true;
}
} // namespace actions
} // namespace ModSecurity

44
src/actions/rev.h Normal file
View File

@@ -0,0 +1,44 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include <string>
#include "actions/action.h"
#ifndef SRC_ACTIONS_REV_H_
#define SRC_ACTIONS_REV_H_
class Assay;
namespace ModSecurity {
class Assay;
namespace actions {
class Rev : public Action {
public:
explicit Rev(std::string action);
bool evaluate(Rule *rule, Assay *assay) override;
private:
std::string m_rev;
};
} // namespace actions
} // namespace ModSecurity
#endif // SRC_ACTIONS_REV_H_