DevFW-CICD/ingress-nginx-helm
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Rollback change of ModSecurity setting SecAuditLog

Browse source
This commit is contained in:
Manuel Alejandro de Brito Fontes 2019-09-24 14:44:48 -03:00
parent 1dc4d184a0
commit ea5add6f5c
No known key found for this signature in database
GPG key ID: 786136016A8BA02A
2 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
images/nginx/rootfs/build.sh
View file

@ -332,8 +332,8 @@ cp unicode.mapping /etc/nginx/modsecurity/unicode.mapping
# Replace serial logging with concurrent
sed -i 's|SecAuditLogType Serial|SecAuditLogType Concurrent|g' /etc/nginx/modsecurity/modsecurity.conf
# Use stdout for modsecurity logs
sed -i 's|SecAuditLog /var/log/modsec_audit.log|SecAuditLog /dev/stdout|g' /etc/nginx/modsecurity/modsecurity.conf
# Concurrent logging implies the log is stored in several files
echo "SecAuditLogStorageDir /var/log/audit/" >> /etc/nginx/modsecurity/modsecurity.conf
# Download owasp modsecurity crs
cd /etc/nginx/
@ -576,6 +576,7 @@ writeDirs=( \
/opt/modsecurity/var/log \
/opt/modsecurity/var/upload \
/opt/modsecurity/var/audit \
/var/log/audit \
);
for dir in "${writeDirs[@]}"; do