Re: [mod-security-users] WAF file and folder locations

[Christian F. <chr...@ne...>]

Hi Peter,

On Tue, Jan 22, 2019 at 02:07:28PM +0100, Peter Bittner wrote:
> I'm looking for documentation (or a source file) listing the configurable
> folders of the WAF and their meaning.

Good plan.

> When I look at a host we run, there are the following folders and files in
> `/modsecurity`:
> 
> - apache/
> - audit/
> - data/
> - tmp/
> - upload/
> - modsec_audit.log
> - virus-check.log

The ModSecurity Handbook is covering this in sufficient detail. 
Nicolas / Bigli is supposed to have a copy AFAICT. If not, let me know
and I'll send you one.

Please make sure
you get the partition restriction between /tmp and /upload right (need to be
on the same partition).

Other than that, I suggest to keep modsec_audit.log and audit/ together. They
former references files in the latter.

Best,

Christian


-- 
Besides, Emacs would be a far better OS if it shipped with a 
halfway-decent text editor - like vi for example.