openlitespeed icon indicating copy to clipboard operation
openlitespeed copied to clipboard

/usr/local/lsws/logs/auditmodsec.log can fill all the storage space

Open franciscopaniskaseker opened this issue 4 years ago • 3 comments
trafficstars

This log does not has any kind of rotation, so it can fill all the server storage free space.

franciscopaniskaseker avatar Dec 10 '20 15:12 franciscopaniskaseker

I think this log file is managed by mod_security module, it is not fixed, but configured in mod_security configuration, even though, the mod_security module is embedded in web server, web server does not try to understand its configurations, just pass through. thus difficult for web server to rotate it . It can be done externally via cron job, or some log rotation daemon services.

litespeedtech avatar Jan 27 '21 16:01 litespeedtech

Just to make a note, this is also happening with the log /usr/local/lsws/logs/modsec.log.

franciscopaniskaseker avatar Apr 01 '21 20:04 franciscopaniskaseker

/usr/local/lsws/logs/modsec.log is the same thing, also directly used by libmodsecurity.

litespeedtech avatar Apr 01 '21 21:04 litespeedtech