Using Mod Security with Mod Ruid

[mickalo]

Hello,

we are looking at implementing Mod Ruid w/Mod Security via the WHM Easyapache to address the Symlink Protection Advisory issue. We are currently using CMC which works with the mod audit log. But when using Mod Ruid with Mod Security the location of the mod audit log is changed. According to the documentation:

Code: Select all

If you install Mod Ruid2 and Mod Security, the Mod Security log location is: 
/usr/local/apache/logs/modsec_audit/[user]/YYYYMMDD/YYYYMMDD-HHmm/YYYYMMDD-HHmmSS-[unique_id]

My question is will the CMC still function with this setup ?

Thank you,
Mike

[ForumAdmin]

The rules for ModSecurity should still work. The processing of the ModSecurity logs will not.

[mickalo]

Ok thank you for the information.

Mike