Re: [mod-security-users] can't seem to get notification working...

[Ivan R. <iv...@we...>]

> So the only way I could get this to work is to comment the above code and 
> recompile suexec.  Obviously this is probably a bad idea but I just did it 
> to prove the point.
> 
> Any ideas on how to make this work without hacking suexec?

  I will try to modify mod_security tomorrow to make it work with
  suexec. Perhaps I can chdir to the folder first and just use the
  name of the script for execution. Suexec checks the DOC_ROOT anyway.


> Also, are there environment varibles I can use to get more specific in my 
> alers?

  Normally you will get MOD_SECURITY_EXECUTED, MOD_SECURITY_STATUS, and
  MOD_SECURITY_MESSAGE but, having just looked at the code it seems that
  the latter two are not available when external binaries are executed.
  I'll fix that in the next release.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]