mod_ruid2

[BruceLee]

Thanks for the info. If there is something I can do please let me know.

[biggles]

Thanks for the info. If there is something I can do please let me know.

+1

[scott]

Get in there, throw commands and changes at it til it works.

[ikkk]

There are crude ways to get this working by changing modsecurity to write its logs at 777 -

echo "umask 0" >> /etc/sysconfig/httpd
echo "SecAuditLogDirMode 0777" > /etc/httpd/conf.d/01_mod_security_changes.conf
service httpd configtest && service httpd stop && service httpd start

Them simple changes will make it work (tomorrow) ie so that the new date folder is created as 777

You can also alter the log directory that each vhost uses to log to say /var/www/vhosts/DOMAIN/statistic/logs/audit/ but then you loose functionality from the asl interface