Re: [Prelude Hybrid IDS] #216: mod_security cleanup, and compatibility with version 2.0 (was: mod_security modifications)
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#216: mod_security cleanup, and compatibility with version 2.0
-------------------------+--------------------------------------------------
Reporter: gegomez | Owner: gegomez
Type: defect | Status: assigned
Priority: normal | Milestone: Prelude-LML 0.9.13
Component: prelude-lml | Version: 0.9
Severity: normal | Resolution:
Keywords: |
-------------------------+--------------------------------------------------
Description changed by yoann:
Old description:
> Correct the following:
>
> * Place the unique_id data in the correct field (remove
> classification.ident, most likely belongs in additional_data).
> * Correct classification.text where action taken is included (this
> should be in the action field); remove the action taken to improve
> correlation capabilities based on classification.text independent of
> action taken.
> * Audit ruleset for mod_security 2.0
New description:
Correct the following:
* Place the unique_id data in the correct field (remove
classification.ident, most likely belongs in additional_data).
* Correct classification.text where action taken is included (this should
be in the action field); remove the action taken to improve correlation
capabilities based on classification.text independent of action taken.
* Audit ruleset for mod_security 2.0
--
--
Ticket URL: <https://trac.prelude-ids.org/ticket/216#comment:3>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel