coreruleset / modsecurity-crs-docker

Official ModSecurity Docker + Core Rule Set (CRS) images
https://coreruleset.org
Apache License 2.0
237 stars 62 forks source link

MODSEC_AUDIT_STORAGE_DIR variable breaks bootup #246

Closed gtaws closed 2 months ago

gtaws commented 2 months ago

On 4.1.0-nginx-202405050505, it seems like a new variable MODSEC_AUDIT_STORAGE_DIR was introduced and added to /etc/modsecurity.d/modsecurity.conf . No documentation for this variable exists. it's breaking boot up of image now with error [emerg] 1#1: "modsecurity_rules_file" directive Rules error. File: /etc/modsecurity.d/modsecurity.conf. Line: 11. Column: 50. Invalid input: SecAuditLogStorageDir ${MODSEC_AUDIT_STORAGE_DIR} in /etc/nginx/conf.d/modsecurity.conf:2. Reverting to 4.1.0-nginx-202404070904 fixed the issue for now. Need guidance

fzipi commented 2 months ago

Duplicate from #243. There will be a new release today.