github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-14 05:45:59 +03:00
Code Issues Packages Projects Releases Wiki Activity

Enable "auditlog" action by default. See #445 and #451.

Browse Source
This commit is contained in:
brectanus 2008-06-02 23:31:27 +00:00
parent e209cb7688
commit f2449c6f35
3 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES
View File

@ -1,6 +1,9 @@
30 May 2008 - trunk 02 Jun 2008 - trunk
------------------- -------------------
* Enable the "auditlog" action by default to help prevent a misconfiguration.
The new default is now: "phase:2,log,auditlog,pass"
* Improve request body processing error messages. * Improve request body processing error messages.
* Handle lack of a new line after the final boundary in a multipart request. * Handle lack of a new line after the final boundary in a multipart request.

4
apache2/re.c
View File

@ -659,7 +659,7 @@ msre_actionset *msre_actionset_merge(msre_engine *engine, msre_actionset *parent
msre_actionset *msre_actionset_create_default(msre_engine *engine) { msre_actionset *msre_actionset_create_default(msre_engine *engine) {
char *my_error_msg = NULL; char *my_error_msg = NULL;
return msre_actionset_create(engine, return msre_actionset_create(engine,
"phase:2,log,pass", "phase:2,log,auditlog,pass",
&my_error_msg); &my_error_msg);
} }
@ -691,7 +691,7 @@ void msre_actionset_set_defaults(msre_actionset *actionset) {
if (actionset->intercept_pause == NOT_SET) actionset->intercept_pause = 0; if (actionset->intercept_pause == NOT_SET) actionset->intercept_pause = 0;
/* Other */ /* Other */
if (actionset->auditlog == NOT_SET) actionset->auditlog = 0; if (actionset->auditlog == NOT_SET) actionset->auditlog = 1;
if (actionset->log == NOT_SET) actionset->log = 1; if (actionset->log == NOT_SET) actionset->log = 1;
} }

4
doc/modsecurity2-apache-reference.xml
View File

@ -4,7 +4,7 @@
Manual</title> Manual</title>
<articleinfo> <articleinfo>
<releaseinfo>Version 2.6.0-trunk (April 02, 2008)</releaseinfo> <releaseinfo>Version 2.6.0-trunk (June 02, 2008)</releaseinfo>
<copyright> <copyright>
<year>2004-2008</year> <year>2004-2008</year>
@ -1185,7 +1185,7 @@ SecAuditLogStorageDir logs/audit
<para>The default value is minimal (differing from previous <para>The default value is minimal (differing from previous
versions):</para> versions):</para>
<programlisting format="linespecific">SecDefaultAction phase:2,log,pass</programlisting> <programlisting format="linespecific">SecDefaultAction phase:2,log,auditlog,pass</programlisting>
<para><emphasis>Note</emphasis></para> <para><emphasis>Note</emphasis></para>