From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 5C1FC1382C5 for ; Sun, 3 Jan 2021 16:02:51 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 095B2E0896; Sun, 3 Jan 2021 16:02:46 +0000 (UTC) Received: from mail-gw.thundermail.uk (mail-gw.thundermail.uk [149.255.60.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 9EACEE088B for ; Sun, 3 Jan 2021 16:02:45 +0000 (UTC) Received: from mailgw01.thundermail.uk (mail-gw.thundermail.uk [149.255.60.66]) by mail-gw.thundermail.uk (Postfix) with ESMTPS id 7AE1B60000A3 for ; Sun, 3 Jan 2021 16:02:43 +0000 (GMT) X-ASG-Debug-ID: 1609689762-05541338964d480001-LfjuLa Received: from cloud307.thundercloud.uk (cloud307.thundercloud.uk [149.255.58.40]) by mailgw01.thundermail.uk with ESMTP id ff4NRJ3sOj2QkQEy (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Sun, 03 Jan 2021 16:02:42 +0000 (GMT) X-Barracuda-Envelope-From: confabulate@kintzios.com X-Barracuda-Effective-Source-IP: cloud307.thundercloud.uk[149.255.58.40] X-Barracuda-Apparent-Source-IP: 149.255.58.40 Received: from lenovo.localdomain (230.3.169.217.in-addr.arpa [217.169.3.230]) by cloud307.thundercloud.uk (Postfix) with ESMTPSA id 615D9C75C95 for ; Sun, 3 Jan 2021 16:02:41 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kintzios.com; s=default; t=1609689761; bh=Jzlxl00T3CXKUmhWChQTuBSPtssIhCzq6mQWw4cMPiM=; h=From:To:Subject; b=B03X6G1JZKkNIzo85ldctyc0ECs1bjvfMUOLPYXp9fm2o3gjwPgyQ7ud+LPg20gZN gc3umkMt1XatO//Yng+G0VqoDnFdQAQOhEhlhX48Zli1sjiBxTelVBTYudxi98djoW LYyRe7twBdyLToqabyoqY0ey5Xi1HIvJsSLEnhBI= Authentication-Results: cloud307.thundercloud.uk; spf=pass (sender IP is 217.169.3.230) smtp.mailfrom=confabulate@kintzios.com smtp.helo=lenovo.localdomain Received-SPF: pass (cloud307.thundercloud.uk: connection is authenticated) From: Michael To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Apache 2.4 - set SecStatusEngine to On Date: Sun, 03 Jan 2021 16:02:40 +0000 X-ASG-Orig-Subj: Re: [gentoo-user] Apache 2.4 - set SecStatusEngine to On Message-ID: <1815949.taCxCBeP46@lenovo.localdomain> In-Reply-To: <2b509225-dbbd-ca6f-6dd8-221d31e918d3@sys-concept.com> References: <2b509225-dbbd-ca6f-6dd8-221d31e918d3@sys-concept.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1747363.atdPhlSkOF"; micalg="pgp-sha256"; protocol="application/pgp-signature" X-PPP-Message-ID: <20210103160241.2014905.56736@cloud307.thundercloud.uk> X-PPP-Vhost: kintzios.com X-Barracuda-Connect: cloud307.thundercloud.uk[149.255.58.40] X-Barracuda-Start-Time: 1609689762 X-Barracuda-Encrypted: ECDHE-RSA-AES128-GCM-SHA256 X-Barracuda-URL: https://149.255.60.66:443/cgi-mod/mark.cgi X-ASG-Orig-Subj: Re: [gentoo-user] Apache 2.4 - set SecStatusEngine to On X-Virus-Scanned: by bsmtpd at thundermail.uk X-Barracuda-Scan-Msg-Size: 1468 X-Barracuda-BRTS-Status: 1 X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=1.9 tests= X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.86978 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- X-Archives-Salt: adf725b3-4136-47cc-8f54-e6bf52541c92 X-Archives-Hash: c077eb996fd0dd54592a675bbcc8a9ed --nextPart1747363.atdPhlSkOF Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="UTF-8"; protected-headers="v1" From: Michael To: gentoo-user@lists.gentoo.org Reply-To: confabulate@kintzios.com Subject: Re: [gentoo-user] Apache 2.4 - set SecStatusEngine to On Date: Sun, 03 Jan 2021 16:02:40 +0000 Message-ID: <1815949.taCxCBeP46@lenovo.localdomain> In-Reply-To: <2b509225-dbbd-ca6f-6dd8-221d31e918d3@sys-concept.com> References: <2b509225-dbbd-ca6f-6dd8-221d31e918d3@sys-concept.com> On Saturday, 2 January 2021 04:46:58 GMT thelma@sys-concept.com wrote: > Status engine is currently disabled, enable it by set SecStatusEngine to On. > > How to enable "SecStatusEngine to On" in Apache 2.4 > > From my log file: > [Fri Jan 01 19:44:52.649498 2021] [core:notice] [pid 14152] AH00094: > Command line: '/usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D SSL -D > SSL_DEFAULT_VHOST -D LANGUAGE -D PHP -D SECURITY -d /usr/lib64/apache2 > -f /etc/apache2/httpd.conf' > [Fri Jan 01 21:10:26.781254 2021] [mpm_prefork:notice] [pid 14152] > AH00169: caught SIGTERM, shutting down > [Fri Jan 01 21:10:27.871561 2021] [:notice] [pid 16586] ModSecurity for > Apache/2.9.3 (http://www.modsecurity.org/) configured. > [Fri Jan 01 21:10:27.871577 2021] [:notice] [pid 16586] ModSecurity: APR > compiled version="1.7.0"; loaded version="1.7.0" > [Fri Jan 01 21:10:27.871579 2021] [:notice] [pid 16586] ModSecurity: > PCRE compiled version="8.44 "; loaded version="8.44 2020-02-12" > [Fri Jan 01 21:10:27.871581 2021] [:notice] [pid 16586] ModSecurity: > LIBXML compiled version="2.9.10" > [Fri Jan 01 21:10:27.871582 2021] [:notice] [pid 16586] ModSecurity: > Status engine is currently disabled, enable it by set SecStatusEngine to On. I would think you set it on in the config file for your vhost. I don't use this function, but there are instructions how to configure it here: https://github.com/SpiderLabs/ModSecurity/wiki HTH. --nextPart1747363.atdPhlSkOF Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEXqhvaVh2ERicA8Ceseqq9sKVZxkFAl/x6qAACgkQseqq9sKV ZxmWQhAApt+goLtIeNNKc03gWC/WILDAQbmzlacEjnIxEEAjBphqDHN9dpjHbyVQ x8/2bRuQgHmH5Jv6AKM2eAq6MHBQsTi7LCYT1gz0ohN+8OLoFGLrUKF8x0FrJ7IX lHTN0WfSUrQM0MzmJ+g3fqzaBy15jPmEL8QuMqtltWPReDvQ+Up1NRDD/YFPcTuU Q8/SuTjqdrXatCgjbXiW7UhXqT78s57tlq/w7bHqjrCkLtpLFfi6VLwsBp91hvAL tcizGd8gToNtJiZdlNBzsSICOsZ65qgYYewdOxVt20vEWGV6G+4QgCcnRyYFxkdN OpIE21WeX0E8JyUQUXp66lUmIoZeZtlJ91kQwGuLQ14/MhUrUImXrO9MhAdGrGmT r6/tIn1GowjBiLf2OZ5C1TvmetR/jm8e74ICLZTqCdO8dHf1oUaAK0VGmvqCK80/ tGDhEvnOa84IX0nbUABs9RNvxi3nBHy3Zrmd5E1dhZfZ89PU4Y7ml279r0FqvvY6 U6zKlwbcW5zU1VSatLmyhZOB0F6A1A/Xg6qjw9sdUete4V4cXH2lqZGA6OUVXIPh 7mWNUnchXW1PsXr+AE3RyoR0VUqSK1PjtPgQLlBipdh7uMwu2faNzs9kHAGveZBV XBIOxMofjBUoFVh+eBVpXnL7PhOy8CeXy6VEZOcBvrjKzR1Y2ps= =CVzi -----END PGP SIGNATURE----- --nextPart1747363.atdPhlSkOF--