How to enable SecStatusEngine

Nirjonadda

• April 25, 2018 13:17

Please can you let me know that how to enable SecStatusEngine? Does Add in the Apache Configuration "Include Editor > Pre Main Include SecStatusEngine On

• 

  cPanelLauren

  • April 25, 2018 18:48

  Hello, You should be able to enable this in the modsecurity conf at /etc/apache2/conf.d/modsec2.conf

  0
• 

  Nirjonadda

  • April 25, 2018 19:33

  Hello, You should be able to enable this in the modsecurity conf at /etc/apache2/conf.d/modsec2.conf

  
  Please let me know that where we can add "SecStatusEngine On"? ################################################### # WARNING: All changes to this file will be lost! # WARNING: All changes to this file will be lost! # # Make changes to modsec/modsec2.user.conf instead! # # WARNING: All changes to this file will be lost! # WARNING: All changes to this file will be lost! ################################################### SecAuditLog logs/modsec_audit.log SecDebugLog logs/modsec_debug.log SecDebugLogLevel 0 SecDefaultAction "phase:2,deny,log,status:406" # Switch to concurrent logging when Apache is running under a multi-uid # environment. This ensures that each user can successfully log to # their own log file. SecAuditLogStorageDir logs/modsec_audit SecAuditLogType Concurrent SecAuditLogStorageDir logs/modsec_audit SecAuditLogType Concurrent # user.conf must com before cpanel.conf to allow adminsitrators # to selectively disable vendor rules Include /etc/apache2/conf.d/modsec/modsec2.user.conf Include /etc/apache2/conf.d/modsec/modsec2.cpanel.conf ################################################### # WARNING: All changes to this file will be lost! # WARNING: All changes to this file will be lost! # # Make changes to modsec/modsec2.user.conf instead! # # WARNING: All changes to this file will be lost! # WARNING: All changes to this file will be lost! ###################################################
  

  0
• 

  cPanelLauren

  • April 25, 2018 19:56

  Hello, I added it to my /etc/apache2/conf.d/modsec/modsec2.user.conf as follows and have not received another notification that it's disabled: # cat /etc/apache2/conf.d/modsec/modsec2.user.conf SecStatusEngine On And I just realized that erroneously gave you the wrong conf file. The file should be again /etc/apache2/conf.d/modsec/modsec2.user.conf changes made to /etc/apache2/conf.d/modsec2.conf will be overwritten Thank you,

  0

Please sign in to leave a comment.