Skip to content

Commit a5c3548

Browse files
author
Marc Stern
committed
{dis|en}able-server-context-logging: Option to disable logging of server info (log producer, sanitized objects, ...) in audit log.
[Issue #1069 - Marc Stern]
1 parent 6139df8 commit a5c3548

File tree

3 files changed

+16
-16
lines changed

3 files changed

+16
-16
lines changed

CHANGES

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
DD MMM YYYY - 2.9.2 - To be released
22
------------------------------------
33

4-
* {dis|en}able-log-producer-logging: Option to disable logging of
5-
log producer in audit log.
4+
* {dis|en}able-server-context-logging: Option to disable logging of
5+
server info (log producer, sanitized objects, ...) in audit log.
66
[Issue #1069 - Marc Stern]
77
* {dis|en}able-handler-logging: Option to disable logging of Apache handler
88
in audit log

apache2/msc_logging.c

+6-6
Original file line numberDiff line numberDiff line change
@@ -1174,7 +1174,7 @@ void sec_audit_logger_json(modsec_rec *msr) {
11741174
yajl_kv_bool(g, "response_body_dechunked", 1);
11751175
}
11761176

1177-
#ifdef LOG_NO_PRODUCER
1177+
#ifdef LOG_NO_SERVER_CONTEXT
11781178
if (msr->txcfg->debuglog_level >= 9) {
11791179
#endif
11801180
sec_auditlog_write_producer_header_json(msr, g);
@@ -1271,7 +1271,7 @@ void sec_audit_logger_json(modsec_rec *msr) {
12711271
if (been_opened == 1) {
12721272
yajl_gen_map_close(g); // sanitized args map is finished
12731273
}
1274-
#ifdef LOG_NO_PRODUCER
1274+
#ifdef LOG_NO_SERVER_CONTEXT
12751275
}
12761276
#endif
12771277

@@ -2013,7 +2013,7 @@ void sec_audit_logger_native(modsec_rec *msr) {
20132013
sec_auditlog_write(msr, text, strlen(text));
20142014
}
20152015

2016-
#ifdef LOG_NO_PRODUCER
2016+
#ifdef LOG_NO_SERVER_CONTEXT
20172017
if (msr->txcfg->debuglog_level >= 9) {
20182018
#endif
20192019
sec_auditlog_write_producer_header(msr);
@@ -2084,10 +2084,10 @@ void sec_audit_logger_native(modsec_rec *msr) {
20842084
sec_auditlog_write(msr, text, strlen(text));
20852085
}
20862086
}
2087-
2088-
#ifdef LOG_NO_PRODUCER
2089-
}
2087+
#ifdef LOG_NO_SERVER_CONTEXT
2088+
}
20902089
#endif
2090+
20912091
/* Web application info. */
20922092
if ( ((msr->txcfg->webappid != NULL)&&(strcmp(msr->txcfg->webappid, "default") != 0))
20932093
|| (msr->sessionid != NULL) || (msr->userid != NULL))

configure.ac

+8-8
Original file line numberDiff line numberDiff line change
@@ -487,19 +487,19 @@ AC_ARG_ENABLE(handler-logging,
487487
log_handler=''
488488
])
489489

490-
# Disable logging of log producer
491-
AC_ARG_ENABLE(log-producer-logging,
492-
AS_HELP_STRING([--enable-log-producer-logging],
493-
[Enable logging of log producer in audit log when log level < 9. This is the default]),
490+
# Disable logging of server context
491+
AC_ARG_ENABLE(server-context-logging,
492+
AS_HELP_STRING([--enable-server-context-logging],
493+
[Enable logging of server info (log producer, sanitized objects, ...) in audit log when log level < 9. This is the default]),
494494
[
495495
if test "$enableval" != "no"; then
496-
log_producer=
496+
log_server_context=
497497
else
498-
log_producer="-DLOG_NO_PRODUCER"
498+
log_server_context="-DLOG_NO_SERVER_CONTEXT"
499499
fi
500500
],
501501
[
502-
log_producer=''
502+
log_server_context=''
503503
])
504504

505505
# Ignore configure errors
@@ -752,7 +752,7 @@ else
752752
fi
753753
fi
754754

755-
MODSEC_EXTRA_CFLAGS="$pcre_study $pcre_match_limit $pcre_match_limit_recursion $pcre_jit $request_early $htaccess_config $lua_cache $debug_conf $debug_cache $debug_acmp $debug_mem $perf_meas $modsec_api $cpu_type $unique_id $log_filename $log_server $log_collection_delete_problem $log_producer"
755+
MODSEC_EXTRA_CFLAGS="$pcre_study $pcre_match_limit $pcre_match_limit_recursion $pcre_jit $request_early $htaccess_config $lua_cache $debug_conf $debug_cache $debug_acmp $debug_mem $perf_meas $modsec_api $cpu_type $unique_id $log_filename $log_server $log_collection_delete_problem $log_server_context"
756756

757757
APXS_WRAPPER=build/apxs-wrapper
758758
APXS_EXTRA_CFLAGS=""

0 commit comments

Comments
 (0)