Felipe Zimmerle
abec93263b
Adds support to MULTIPART_CRLF_LF_LINES variable
2015-07-21 15:29:13 -03:00
Felipe Zimmerle
21f4c49a0f
Adds support to MATCHED_VAR_NAME variable
2015-07-21 14:32:05 -03:00
Felipe Zimmerle
b089c44c1a
Adds support to MATCHED_VARS_NAMES variable
2015-07-21 14:24:05 -03:00
Felipe Zimmerle
09867791c7
Adds support to MATCHED_VARS variable
2015-07-21 14:21:49 -03:00
Felipe Zimmerle
9d69501961
Adds support to MATCHED_VAR variable
2015-07-21 12:02:14 -03:00
Felipe Zimmerle
4f20f5bf74
Adds initial support to chained rules
2015-07-21 12:02:10 -03:00
Felipe Zimmerle
9c066e3198
Adds support to the INBOUND_DATA_ERROR variable and SecRequestBodyLimit direc.
2015-07-21 10:02:33 -03:00
Felipe Zimmerle
95c2fed89c
Adds support to severity action and HIGHEST_SEVERITY variable
2015-07-21 01:09:13 -03:00
Felipe Zimmerle
e189055ec3
Adds support to GeoIP operator and variables.
2015-07-20 21:05:14 -03:00
Felipe Zimmerle
41bf1490b7
Adds MODSEC_BUILD variable
2015-07-20 20:43:07 -03:00
Felipe Zimmerle
6e46c5c7f7
Adds support to FULL_REQUEST_LENGTH variable
2015-07-20 20:42:27 -03:00
Felipe Zimmerle
e516ded1e7
Adds FULL_REQUEST variable
2015-07-20 20:41:39 -03:00
Felipe Zimmerle
a264fc11c8
Adds support to the FILES_TMP_CONTENT variable
2015-07-17 15:50:49 -03:00
Felipe Zimmerle
b6cccc798a
Adds support to the FILES_SIZES variable
2015-07-17 15:46:54 -03:00
Felipe Zimmerle
ebb16d0439
Adds support to FILES_COMBINED_SIZE variable
2015-07-17 15:43:13 -03:00
Felipe Zimmerle
e1cff89b48
Adds support to FILES_NAMES variable
2015-07-17 15:38:04 -03:00
Felipe Zimmerle
fe6a9913c1
Adds test case for FILES variable
2015-07-17 15:35:51 -03:00
Felipe Zimmerle
5d5e10bfde
Adds support for basic Multipart process
...
Adjustments will be needed, for instance: the logging support is still missing
2015-07-17 15:12:15 -03:00
Felipe Zimmerle
d0b7a9966d
Adds support to the ENV variable
2015-07-15 12:34:06 -03:00
Felipe Zimmerle
27252bc801
Adds support to the variable DURATION
2015-07-15 12:34:06 -03:00
Felipe Zimmerle
33dff0f1bf
Refactoring on the variables resoluvtion method
2015-07-15 12:34:06 -03:00
Felipe Zimmerle
8c408ebcd7
Adds support to AUTH_TYPE variable
2015-07-15 12:33:59 -03:00
Felipe Zimmerle
d86427f1dd
Minor fix on the auditlog regression tests
2015-07-14 16:42:03 -03:00
Felipe Zimmerle
f0624bb089
Adds support to ARGS_GET_NAMES variable
2015-07-14 16:41:55 -03:00
Felipe Zimmerle
e7ec09623d
Adds support to ARGS_POST_NAMES variable
2015-07-14 16:41:36 -03:00
Felipe Zimmerle
bc0553e726
Adds support to the variable ARGS_NAMES
2015-07-14 15:22:42 -03:00
Felipe Zimmerle
92c132b64c
Adds support to the ARGS_GET variable
2015-07-14 15:22:42 -03:00
Felipe Zimmerle
492526cfc5
Minor fix on the actions test case
2015-07-14 15:22:34 -03:00
Felipe Zimmerle
85f065363d
Adds support to the variable ARGS_POST
2015-07-14 14:28:14 -03:00
Felipe Zimmerle
228a5ce7cc
Adds support to ARGS_COMBINED_SIZE variable
2015-07-14 14:17:12 -03:00
Felipe Zimmerle
76b769cc84
Decodes the url content before assing values to varibles
2015-07-14 13:54:56 -03:00
Felipe Zimmerle
b2954ff223
Fills ARGS variable even on POST
2015-07-14 01:35:52 -03:00
Felipe Zimmerle
9f869a6aab
Adds test case for the variable ARGS
2015-07-14 01:35:46 -03:00
Felipe Zimmerle
80f13437e3
Refactoring on the variable read/store methods
...
Now it is ready to received two (or more) variables with same key.
2015-07-14 00:33:57 -03:00
Felipe Zimmerle
f13a1bd880
Adds support the Parallel audit log index creation
...
The index is now being generated.
2015-07-14 00:33:57 -03:00
Felipe Zimmerle
96a777a5cf
Adds initial serial audit logging support
...
Serial logging following the format used on ModSecurity 2.9.
2015-07-14 00:33:50 -03:00
Felipe Zimmerle
001d5ebf7f
Properly deal with classes destructors
...
There are some classes such as AuditLog that demands a reference count. That is
needed because this class can be used by different instances of the Rules
classes.
2015-07-13 14:16:48 -03:00
Felipe Zimmerle
0c98bdc80b
Adds support to SecAuditLogParts
2015-07-10 19:08:32 -03:00
Felipe Zimmerle
5e33a1a3c4
Opens auditlog files and directories with the correct mode
...
Respecting the directives: SecAuditLogStorageDir and SecAuditLogFileMode
2015-07-10 19:08:28 -03:00
Felipe Zimmerle
c9620ac50f
Writes audit log in parallel mode
...
First version still missing the index among other things
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
693238b235
Process the log phase independent of disruptive actions
...
Disruptive actions was making the log phase to not be processed.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
5e80e001e5
Adds Components information to the audit logs
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
1ddb36a781
Adds SecComponentSignature configuration directive
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
4aa521df65
Adds SecRuleEngine state information to the audit logs
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
75a9cfa273
Uses an enumeration to determine the state of the SecRuleEngine
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
cb8d6249a8
Adds connector information to the audit logs
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
2138dd1369
Adds method setConnectorInformation to ModSecurity class
...
For the purpose of log it is necessary for modsecurity to understand which
'connector' is consuming the API.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
e42e7545d7
Adds ModSecurity version information to the audit logs
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
8dab5ac30c
Adds whoAmI method to ModSecurity class
...
The method returns information about the ModSecurity's version and the platform
that it was compiled. Further it will be used by the audit logs and by the
connectors. msc_who_am_i was added accordingly, to the C api.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
aa8dc9115b
Adds first version of Assay's materialization in a JSON format
...
That format will be used by the audit logs.
2015-07-10 18:37:48 -03:00
