From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 0FD671382C5 for ; Sat, 19 Dec 2020 02:52:45 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 030C0E08A2; Sat, 19 Dec 2020 02:52:38 +0000 (UTC) Received: from mail01.datsemultimedia.com (mail01.datsemultimedia.com [45.79.102.219]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id A362CE088D for ; Sat, 19 Dec 2020 02:52:37 +0000 (UTC) Received: from tux2.localnet ([::ffff:192.252.236.104]) (AUTH: LOGIN jigme.datse@datsemultimedia.com, ) by mail01 with ESMTPSA id 00000000001E012A.000000005FDD6AB7.00002BE1; Fri, 18 Dec 2020 18:51:35 -0800 Date: Fri, 18 Dec 2020 18:51:03 -0800 From: Jigme Datse To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On. Message-ID: <20201218173254.103851f9@tux2.localnet> In-Reply-To: References: X-Mailer: Claws Mail 3.17.7 (GTK+ 2.24.32; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: b44bb4f4-6f78-491c-986c-f07c6434c392 X-Archives-Hash: b6f0c140f16d908237120806c84b6a8a On Fri, 18 Dec 2020 18:20:44 -0700 thelma@sys-concept.com wrote: > ModSecurity is installed: > APACHE2_OPTS="-D DEFAULT_VHOST -D INFO -D SSL -D SSL_DEFAULT_VHOST -D > LANGUAGE -D PHP -D SECURITY" > > In which file I have to enable "SecStatusEngine On" ? > > Not worked with Apache for a bit, but I think this is needed in your Apache configuration. Though I'm not sure if it's per virtual server or if it's a global option. If this isn't helpful, I'm just sitting here waiting for stuff to happen, and saw your message, and just thought I'd look to see if I can maybe help.