Adds support to ctl:auditLogParts variation

This commit is contained in:
Felipe Zimmerle
2015-09-01 15:17:53 -03:00
parent e89e395a32
commit fa4f72d90d
12 changed files with 221 additions and 20 deletions

View File

@@ -0,0 +1,45 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include "actions/ctl_audit_log_parts.h"
#include <iostream>
#include <string>
#include "modsecurity/assay.h"
namespace ModSecurity {
namespace actions {
CtlAuditLogParts::CtlAuditLogParts(std::string action)
: Action(action, RunTimeOnlyIfMatchKind),
mPartsAction(0)
{
std::string what(action, 18, 1);
mParts = std::string(action, 19, action.length()-19);
if (what == "+") {
mPartsAction = 0;
} else {
mPartsAction = 1;
}
}
bool CtlAuditLogParts::evaluate(Rule *rule, Assay *assay) {
assay->auditLogModifier.push_back(std::make_pair(mPartsAction, mParts));
return true;
}
} // namespace actions
} // namespace ModSecurity

View File

@@ -0,0 +1,40 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include <string>
#include "actions/action.h"
#include "modsecurity/assay.h"
#ifndef SRC_CLT_ACTIONS_AUDIT_LOG_PARTS_H_
#define SRC_CLT_ACTIONS_AUDIT_LOG_PARTS_H_
namespace ModSecurity {
namespace actions {
class CtlAuditLogParts : public Action {
public:
explicit CtlAuditLogParts(std::string action);
bool evaluate(Rule *rule, Assay *assay) override;
int mPartsAction;
std::string mParts;
};
} // namespace actions
} // namespace ModSecurity
#endif // SRC_CLT_ACTIONS_AUDIT_LOG_PARTS_H_