From e3286ee7ef6e12ccb38a42840ed2d8fee3303486 Mon Sep 17 00:00:00 2001
From: mh <mh@immerda.ch>
Date: Mon, 9 Mar 2009 21:32:28 +0000
Subject: write mod_sec logfiles per vhost

---
 templates/vhosts/php/CentOS.erb | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

(limited to 'templates/vhosts/php')

diff --git a/templates/vhosts/php/CentOS.erb b/templates/vhosts/php/CentOS.erb
index 30a6d72..1bca7e1 100644
--- a/templates/vhosts/php/CentOS.erb
+++ b/templates/vhosts/php/CentOS.erb
@@ -42,7 +42,13 @@
     <%- end -%>
 
     <IfModule mod_security2.c>
-        SecRuleEngine <%= if mod_security.to_s == 'true' then "On" else "Off" end %>
+        <%- if mod_security.to_s == 'true' then -%>
+        SecRuleEngine On
+        SecAuditLog <%= logdir %>/mod_security_audit.log
+        SecFilterDebugLog <%= logdir %>/mod_security_debug.log
+        <%- else -%>
+        SecRuleEngine Off
+        <%- end -%>
     </IfModule>
 
     <%- unless additional_options.to_s == 'absent' then -%>
@@ -96,7 +102,13 @@
     </Directory>
 
     <IfModule mod_security2.c>
-        SecRuleEngine <%= if mod_security.to_s == 'true' then "On" else "Off" end %>
+        <%- if mod_security.to_s == 'true' then -%>
+        SecRuleEngine On
+        SecAuditLog <%= logdir %>/mod_security_audit.log
+        SecFilterDebugLog <%= logdir %>/mod_security_debug.log
+        <%- else -%>
+        SecRuleEngine Off
+        <%- end -%>
     </IfModule>
 
     <%- unless additional_options.to_s == 'absent' then -%>
-- 
cgit v1.2.3