--- modsecurity-2.9.2/modsecurity.conf-recommended.~1~ 2017-07-18 21:45:57.000000000 +0000
+++ modsecurity-2.9.2/modsecurity.conf-recommended 2019-03-01 18:11:39.397303649 +0000
@@ -1,3 +1,12 @@
+# Load mod_unique_id if necessary
+
+LoadModule unique_id_module libexec/mod_unique_id.so
+
+
+LoadModule security2_module libexec/mod_security2.so
+
+
+
# -- Rule engine initialization ----------------------------------------------
# Enable ModSecurity, attaching it to every transaction. Use detection
@@ -135,13 +144,13 @@
# This default setting is chosen due to all systems have /tmp available however,
# this is less than ideal. It is recommended that you specify a location that's private.
#
-SecTmpDir /tmp/
+SecTmpDir /var/apache2/2.4/modsec/tmp/
# The location where ModSecurity will keep its persistent data. This default setting
# is chosen due to all systems have /tmp available however, it
# too should be updated to a place that other users can't access.
#
-SecDataDir /tmp/
+SecDataDir /var/apache2/2.4/modsec/tmp/
# -- File uploads handling configuration -------------------------------------
@@ -150,7 +159,7 @@
# location must be private to ModSecurity. You don't want other users on
# the server to access the files, do you?
#
-#SecUploadDir /opt/modsecurity/var/upload/
+#SecUploadDir /var/apache2/2.4/modsec/upload/
# By default, only keep the files that were determined to be unusual
# in some way (by an external inspection script). For this to work you
@@ -170,7 +179,7 @@
# The default debug log configuration is to duplicate the error, warning
# and notice messages from the error log.
#
-#SecDebugLog /opt/modsecurity/var/log/debug.log
+#SecDebugLog /var/apache2/2.4/logs/modsec_debug.log
#SecDebugLogLevel 3
@@ -190,10 +199,10 @@
# assumes that you will use the audit log only ocassionally.
#
SecAuditLogType Serial
-SecAuditLog /var/log/modsec_audit.log
+SecAuditLog /var/apache2/2.4/logs/modsec_audit.log
# Specify the path for concurrent audit logging.
-#SecAuditLogStorageDir /opt/modsecurity/var/audit/
+#SecAuditLogStorageDir /var/apache2/2.4/modsec/audit/
# -- Miscellaneous -----------------------------------------------------------
@@ -224,3 +233,4 @@
# version, Anonymous unique id for host.
SecStatusEngine On
+