Mod security syntax error

Question

when i ran the command apache2ctl configtest it is showing this error

AH00526: Syntax error on line 193 of /etc/modsecurity/modsecurity.conf:
ModSecurity: Failed to open the audit log file: /var/log/apache2/modsec_audit.log

and on line 193

SecAuditLog /var/log/apache2/modsec_audit.log

what is wrong? can anyone tell why is it so

Look for everything. Whether they exist, what their permissions and ownership are, anything unusual. — Michael Hampton, Dec 05 '18 at 18:42
Which does not exist? The file or the directory? You were meant to look at both. — Michael Hampton, Dec 05 '18 at 18:45
when i restarted the log file is there , and the permission is `-rw-r----- 1 root root 0 Dec 5 18:44 /var/log/apache2/modsec_audit.log` — Sony, Dec 05 '18 at 18:51
Ok so root can write to it. Does Apache run as root? Usually the main Apache process runs as root (to grab port 80 and 443 which requires extra permissions)but the other processes do not (for security reasons). So sounds like you need to fix the permissions. — Barry Pollard, Dec 10 '18 at 20:21
Having the same issue.. what should be the permissions? And how to add them? Thx — Maestro223, Jul 31 '20 at 09:50

score 1 · Answer 1 · answered Sep 29 '21 at 00:53

1

I was almost two years late to this post but in my case it is because I was executing the command without administrator privileges. try with sudo apachectl -t or sudo apache2ctl configtest

answered Sep 29 '21 at 00:53

Ricardo

11
1

Mod security syntax error

1 Answers1