components/apache2-modules/mod_security2/patches/security2-conf.patch
author Petr Sumbera <petr.sumbera@oracle.com>
Thu, 14 Mar 2013 13:45:44 -0700
changeset 1212 207ff3b0329a
child 2159 6169d700868d
permissions -rw-r--r--
16476497 Upgrade ModSecurity to version 2.7.2 15802175 problem in UTILITY/APACHE

Customize conf file for Solaris.

--- modsecurity-apache_2.7.2/modsecurity.conf-recommended
+++ modsecurity-apache_2.7.2/modsecurity.conf-recommended
@@ -1,3 +1,13 @@
+
+<IfDefine 64bit>
+LoadModule security2_module libexec/64/mod_security2.so
+</IfDefine>
+<IfDefine !64bit>
+LoadModule security2_module libexec/mod_security2.so
+</IfDefine>
+
+<IfModule mod_security2.c>
+
 # -- Rule engine initialization ----------------------------------------------
 
 # Enable ModSecurity, attaching it to every transaction. Use detection
@@ -129,13 +139,13 @@
 # This default setting is chosen due to all systems have /tmp available however, 
 # this is less than ideal. It is recommended that you specify a location that's private.
 #
-SecTmpDir /tmp/
+SecTmpDir /var/apache2/2.2/modsec/tmp/
 
 # The location where ModSecurity will keep its persistent data.  This default setting 
 # is chosen due to all systems have /tmp available however, it
 # too should be updated to a place that other users can't access.
 #
-SecDataDir /tmp/
+SecDataDir /var/apache2/2.2/modsec/tmp/
 
 
 # -- File uploads handling configuration -------------------------------------
@@ -144,7 +154,7 @@
 # location must be private to ModSecurity. You don't want other users on
 # the server to access the files, do you?
 #
-#SecUploadDir /opt/modsecurity/var/upload/
+#SecUploadDir /var/apache2/2.2/modsec/upload/
 
 # By default, only keep the files that were determined to be unusual
 # in some way (by an external inspection script). For this to work you
@@ -164,7 +174,7 @@
 # The default debug log configuration is to duplicate the error, warning
 # and notice messages from the error log.
 #
-#SecDebugLog /opt/modsecurity/var/log/debug.log
+#SecDebugLog /var/apache2/2.2/logs/modsec_debug.log
 #SecDebugLogLevel 3
 
 
@@ -184,10 +194,10 @@
 # assumes that you will use the audit log only ocassionally.
 #
 SecAuditLogType Serial
-SecAuditLog /var/log/modsec_audit.log
+SecAuditLog /var/apache2/2.2/logs/modsec_audit.log
 
 # Specify the path for concurrent audit logging.
-#SecAuditLogStorageDir /opt/modsecurity/var/audit/
+#SecAuditLogStorageDir /var/apache2/2.2/modsec/audit/
 
 
 # -- Miscellaneous -----------------------------------------------------------
@@ -211,3 +221,5 @@
 #
 #SecUnicodeCodePage 20127
 #SecUnicodeMapFile unicode.mapping
+
+</IfModule>