conf: change socket path to /var/run/logcorrelator/http.socket

- Update all documentation and configuration files
- Update test cases

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
This commit is contained in:
Jacquin Antoine
2026-03-01 02:14:31 +01:00
parent 395af61497
commit c61774f8ec
5 changed files with 10 additions and 10 deletions

View File

@ -66,7 +66,7 @@ LoadModule reqin_log_module modules/mod_reqin_log.so
JsonSockLogEnabled On JsonSockLogEnabled On
# Unix socket path # Unix socket path
JsonSockLogSocket "/var/run/logcorrelator/http.sock" JsonSockLogSocket "/var/run/logcorrelator/http.socket"
# Headers to log (be careful not to log sensitive data) # Headers to log (be careful not to log sensitive data)
JsonSockLogHeaders X-Request-Id X-Trace-Id User-Agent Referer JsonSockLogHeaders X-Request-Id X-Trace-Id User-Agent Referer
@ -147,7 +147,7 @@ import socket
import os import os
import json import json
SOCKET_PATH = os.environ.get("MOD_REQIN_LOG_SOCKET", "/var/run/logcorrelator/http.sock") SOCKET_PATH = os.environ.get("MOD_REQIN_LOG_SOCKET", "/var/run/logcorrelator/http.socket")
# Remove existing socket file # Remove existing socket file
if os.path.exists(SOCKET_PATH): if os.path.exists(SOCKET_PATH):
@ -199,7 +199,7 @@ These headers are silently skipped (logged at DEBUG level only).
### Socket Security ### Socket Security
- **Socket permissions**: Default to `0o660` (owner and group only) - **Socket permissions**: Default to `0o660` (owner and group only)
- **Recommended path**: `/var/run/logcorrelator/http.sock` (not `/tmp`) - **Recommended path**: `/var/run/logcorrelator/http.socket` (not `/tmp`)
- **Environment variable**: Use `MOD_REQIN_LOG_SOCKET` to configure path - **Environment variable**: Use `MOD_REQIN_LOG_SOCKET` to configure path
- **Group membership**: Ensure Apache user is in the socket's group - **Group membership**: Ensure Apache user is in the socket's group
@ -227,7 +227,7 @@ ls -la /usr/lib/apache2/modules/mod_reqin_log.so
### Socket connection failures ### Socket connection failures
``` ```
[mod_reqin_log] Unix socket connect failed: /var/run/logcorrelator/http.sock [mod_reqin_log] Unix socket connect failed: /var/run/logcorrelator/http.socket
``` ```
- Ensure the socket consumer is running - Ensure the socket consumer is running

View File

@ -163,7 +163,7 @@ configuration:
type: string type: string
context: server-config context: server-config
required_when_enabled: true required_when_enabled: true
example: "/var/run/logcorrelator/http.sock" example: "/var/run/logcorrelator/http.socket"
description: > description: >
Filesystem path of the Unix domain socket to which JSON log lines Filesystem path of the Unix domain socket to which JSON log lines
will be written. will be written.
@ -294,7 +294,7 @@ constraints:
- Module includes built-in blacklist of sensitive headers to prevent - Module includes built-in blacklist of sensitive headers to prevent
accidental credential leakage (Authorization, Cookie, X-Api-Key, etc.). accidental credential leakage (Authorization, Cookie, X-Api-Key, etc.).
- Socket permissions default to 0o660 (owner+group only) for security. - Socket permissions default to 0o660 (owner+group only) for security.
- Recommended socket path: /var/run/logcorrelator/http.sock (not /tmp). - Recommended socket path: /var/run/logcorrelator/http.socket (not /tmp).
- Use environment variable MOD_REQIN_LOG_SOCKET to configure socket path. - Use environment variable MOD_REQIN_LOG_SOCKET to configure socket path.
- Module does not anonymize IPs; data protection is delegated to configuration. - Module does not anonymize IPs; data protection is delegated to configuration.
- No requests are rejected due to logging failures. - No requests are rejected due to logging failures.

View File

@ -10,7 +10,7 @@ JsonSockLogEnabled On
# Unix domain socket path for JSON log output # Unix domain socket path for JSON log output
# Important: if JsonSockLogEnabled is On and this directive is missing/empty, # Important: if JsonSockLogEnabled is On and this directive is missing/empty,
# Apache startup fails due to strict configuration validation. # Apache startup fails due to strict configuration validation.
JsonSockLogSocket "/var/run/logcorrelator/http.sock" JsonSockLogSocket "/var/run/logcorrelator/http.socket"
# HTTP headers to include in the JSON log # HTTP headers to include in the JSON log
# Warning: Be careful not to log sensitive headers like Authorization, Cookie, etc. # Warning: Be careful not to log sensitive headers like Authorization, Cookie, etc.

View File

@ -38,7 +38,7 @@ install -m 644 %{_pkgroot}/%{_sysconfdir}/httpd/conf.d/mod_reqin_log.conf %{buil
%changelog %changelog
* Sun Mar 01 2026 Developer <dev@example.com> - 1.0.6 * Sun Mar 01 2026 Developer <dev@example.com> - 1.0.6
- CONF: Change default socket path to /var/run/logcorrelator/http.sock - CONF: Change default socket path to /var/run/logcorrelator/http.socket
- BUILD: Allow Docker cache for RPM builds (remove --no-cache flag) - BUILD: Allow Docker cache for RPM builds (remove --no-cache flag)
* Sun Mar 01 2026 Developer <dev@example.com> - 1.0.4 * Sun Mar 01 2026 Developer <dev@example.com> - 1.0.4

View File

@ -116,8 +116,8 @@ static void test_parse_enabled_off(void **state)
static void test_parse_socket_path_valid(void **state) static void test_parse_socket_path_valid(void **state)
{ {
(void)state; (void)state;
const char *result = parse_socket_path("/var/run/logcorrelator/http.sock"); const char *result = parse_socket_path("/var/run/logcorrelator/http.socket");
assert_string_equal(result, "/var/run/logcorrelator/http.sock"); assert_string_equal(result, "/var/run/logcorrelator/http.socket");
} }
/* Test: Parse socket path empty */ /* Test: Parse socket path empty */