modsecurity: turn off logging, its too spammy for ramlogs

nextcloud · Feb 7, 2018 · 91eeeea · 91eeeea
1 parent d7f253e
commit 91eeeea
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 1 deletion.
diff --git a/changelog.md b/changelog.md
@@ -1,5 +1,7 @@
 
-[v0.46.1](https://github.com/nextcloud/nextcloudpi/commit/94224c9) (2018-02-07) ping to 4.4.4.2 because google is blocked in china
+[v0.46.2](https://github.com/nextcloud/nextcloudpi/commit/3fbc8be) (2018-02-07) modsecurity: turn off logging, its too spammy for ramlogs
+
+[v0.46.1, master](https://github.com/nextcloud/nextcloudpi/commit/fe57d03) (2018-02-07) ping to 4.4.4.2 because google is blocked in china
 
 [v0.46.0 ](https://github.com/nextcloud/nextcloudpi/commit/4c9dab6) (2018-02-06) update to NC 13.0.0
 

diff --git a/etc/nextcloudpi-config.d/modsecurity.sh b/etc/nextcloudpi-config.d/modsecurity.sh
@@ -42,6 +42,9 @@ EOF
   sed -i 's|SecDataDir .*|SecDataDir /var/cache/modsecurity/|' /etc/modsecurity/modsecurity.conf
   sed -i 's|^SecRequestBodyLimit .*|#SecRequestBodyLimit 13107200|' /etc/modsecurity/modsecurity.conf
 
+  # turn modsecurity logs off, too spammy
+  sed -i 's|SecAuditEngine .*|SecAuditEngine Off|' /etc/modsecurity/modsecurity.conf
+
   cat >> /etc/apache2/apache2.conf <<EOF
 <IfModule mod_security2.c>
   SecServerSignature " "

diff --git a/update.sh b/update.sh
@@ -228,6 +228,9 @@ EOF
   # add ncp-config link
   [[ -e /usr/local/bin/ncp-config ]] || ln -s /usr/local/bin/nextcloudpi-config /usr/local/bin/ncp-config
 
+  # turn modsecurity logs off, too spammy
+  sed -i 's|SecAuditEngine .*|SecAuditEngine Off|' /etc/modsecurity/modsecurity.conf
+
 } # end - only live updates
 
 exit 0