From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id BEE041382C5 for ; Sun, 3 Jan 2021 19:57:15 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 3A794E08F3; Sun, 3 Jan 2021 19:57:10 +0000 (UTC) Received: from mail1106c7.megamailservers.com (mail775.megamailservers.com [69.49.98.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id D14A0E08D3 for ; Sun, 3 Jan 2021 19:57:09 +0000 (UTC) X-Authenticated-User: admin@sys-concept.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=megamailservers.com; s=mailtor; t=1609703829; bh=v+OYUCQfvmCrA43+M9elOI+HhcfcfbgMwCCgXj9SPro=; h=To:References:From:Subject:Date:In-Reply-To:From; b=iwERzqdO1OKDsV3CdN0dK1e4PkrCIVIluntO5M34v3UAwzV1de6b90XyZVpdSMhSc xrUVycEDzb9kQTC/aEIk9F8S9c1akBwYSEBf+bVx0FmcuYqRBnfL1okMysPsy7RJhY biZUMih0Z3pCGA8kUDaoxtMMOsk+RQb+cvv8nL5g= Feedback-ID:thelma@sys-conc X-VIP: 69.49.109.100 Received: from [10.0.0.109] 184.69.242.18":"61597 ([184.69.242.18]) (authenticated bits=0) by mail1106c7.megamailservers.com (8.14.9/8.13.1) with ESMTP id 103Jv40k029394 for ; Sun, 3 Jan 2021 14:57:08 -0500 To: gentoo-user@lists.gentoo.org References: <2b509225-dbbd-ca6f-6dd8-221d31e918d3@sys-concept.com> <1815949.taCxCBeP46@lenovo.localdomain> From: thelma@sys-concept.com Subject: Re: [gentoo-user] Apache 2.4 - set SecStatusEngine to On Message-ID: <77994baa-80df-f862-374e-2b53cf8aff09@sys-concept.com> Date: Sun, 3 Jan 2021 12:57:02 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.6.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 In-Reply-To: <1815949.taCxCBeP46@lenovo.localdomain> Content-Type: text/plain; charset=utf-8 Content-Language: en-CA Content-Transfer-Encoding: 8bit X-CTCH-RefID: str=0001.0A742F1B.5FF22195.0003:SCFSTAT54230205,ss=1,re=-4.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0 X-CTCH-VOD: Unknown X-CTCH-Spam: Unknown X-CTCH-Score: -4.000 X-CTCH-Rules: X-CTCH-Flags: 0 X-CTCH-ScoreCust: 0.000 X-CSC: 0 X-CHA: v=2.3 cv=ff/TNHYF c=1 sm=1 tr=0 a=u3gW5Uk2xAGXuEgp5FffjQ==:117 a=u3gW5Uk2xAGXuEgp5FffjQ==:17 a=IkcTkHD0fZMA:10 a=046jbqsEAAAA:8 a=ifR9Z7qkAAAA:8 a=fLFOHMjTAAAA:20 a=jG9FFjCHBqqOkJVIwN8A:9 a=QEXdDO2ut3YA:10 a=bGzDz6Hpkc7_N_b525It:22 a=WnX006WFd4PDp54I9F9W:22 X-VADE-SPAMSTATE: clean X-VADE-SPAMSCORE: 0 X-VADE-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgedujedrvdefuddgudefvdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfjqffuvffqrffktedpqfgfvfenuceurghilhhouhhtmecufedttdenucenucfjughrpefvfhfhuffkffgfgggjtgfgsehtkeertddtfeejnecuhfhrohhmpehthhgvlhhmrgesshihshdqtghonhgtvghpthdrtghomhenucggtffrrghtthgvrhhnpeduheffgeekueffffejuedvlefgkeegheegfeetffekjeetheduvdehvefhvefhleenucffohhmrghinhepmhhoughsvggtuhhrihhthidrohhrghdpghhithhhuhgsrdgtohhmnecukfhppedukeegrdeiledrvdegvddrudeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepudekgedrieelrddvgedvrddukedphhgvlhhopegluddtrddtrddtrddutdelngdpmhgrihhlfhhrohhmpehthhgvlhhmrgesshihshdqtghonhgtvghpthdrtghomhdprhgtphhtthhopehgvghnthhoohdquhhsvghrsehlihhsthhsrdhgvghnthhoohdrohhrgh X-Origin-Country: CA X-Archives-Salt: 9e998db6-ae34-465e-8bb9-1558227deb13 X-Archives-Hash: 5ba86413c665b3acbf8087aabe3801c3 Thelma On 1/3/21 9:02 AM, Michael wrote: > On Saturday, 2 January 2021 04:46:58 GMT thelma@sys-concept.com wrote: >> Status engine is currently disabled, enable it by set SecStatusEngine to On. >> >> How to enable "SecStatusEngine to On" in Apache 2.4 >> >> From my log file: >> [Fri Jan 01 19:44:52.649498 2021] [core:notice] [pid 14152] AH00094: >> Command line: '/usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D SSL -D >> SSL_DEFAULT_VHOST -D LANGUAGE -D PHP -D SECURITY -d /usr/lib64/apache2 >> -f /etc/apache2/httpd.conf' >> [Fri Jan 01 21:10:26.781254 2021] [mpm_prefork:notice] [pid 14152] >> AH00169: caught SIGTERM, shutting down >> [Fri Jan 01 21:10:27.871561 2021] [:notice] [pid 16586] ModSecurity for >> Apache/2.9.3 (http://www.modsecurity.org/) configured. >> [Fri Jan 01 21:10:27.871577 2021] [:notice] [pid 16586] ModSecurity: APR >> compiled version="1.7.0"; loaded version="1.7.0" >> [Fri Jan 01 21:10:27.871579 2021] [:notice] [pid 16586] ModSecurity: >> PCRE compiled version="8.44 "; loaded version="8.44 2020-02-12" >> [Fri Jan 01 21:10:27.871581 2021] [:notice] [pid 16586] ModSecurity: >> LIBXML compiled version="2.9.10" >> [Fri Jan 01 21:10:27.871582 2021] [:notice] [pid 16586] ModSecurity: >> Status engine is currently disabled, enable it by set SecStatusEngine to On. > > I would think you set it on in the config file for your vhost. I don't use > this function, but there are instructions how to configure it here: > > https://github.com/SpiderLabs/ModSecurity/wiki > > HTH. Adding: SecStatusEngine On to: 79_mod_security.conf solved the problem, the error message went away, but I'm puzzled why these messages appear in file: error_log these are not error logs just information.