Bug 1741189

Summary: mod_security support for JSON in RHEL 7
Product: Red Hat Enterprise Linux 7 Reporter: Leticia Konno <lkonno>
Component: mod_securityAssignee: Luboš Uhliarik <luhliari>
Status: CLOSED NEXTRELEASE QA Contact: RHEL Stacks Subsystem QE <rhel-stacks-subsystem-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.8CC: jorton, luhliari
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-01-17 14:45:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Leticia Konno 2019-08-14 13:23:14 UTC
Description of problem:

RHEL 7 mod_security does not support JSON auditlog

Version-Release number of selected component (if applicable):

Apache httpd 2.4.6
Mod_Security: 2.9.2-1.el7.ppc64le

How reproducible:


Steps to Reproduce:
1. add SecAuditLogFormat JSON to modsecurity.conf

Actual results:

"Invalid command 'SecAuditLogFormat', perhaps misspelled or defined by a module not included in the server configuration".

Expected results:


Additional info:

Comment 4 Joe Orton 2020-01-17 14:45:52 UTC
This feature is present in RHEL 8 mod_security as well as mod_security packaged in the httpd24 collection for RHSCL on RHEL7.

We have no plans to add this feature to the base-RHEL7 mod_security.