conf: change socket path to /var/run/logcorrelator/http.socket
- Update all documentation and configuration files - Update test cases Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
This commit is contained in:
@ -66,7 +66,7 @@ LoadModule reqin_log_module modules/mod_reqin_log.so
|
|||||||
JsonSockLogEnabled On
|
JsonSockLogEnabled On
|
||||||
|
|
||||||
# Unix socket path
|
# Unix socket path
|
||||||
JsonSockLogSocket "/var/run/logcorrelator/http.sock"
|
JsonSockLogSocket "/var/run/logcorrelator/http.socket"
|
||||||
|
|
||||||
# Headers to log (be careful not to log sensitive data)
|
# Headers to log (be careful not to log sensitive data)
|
||||||
JsonSockLogHeaders X-Request-Id X-Trace-Id User-Agent Referer
|
JsonSockLogHeaders X-Request-Id X-Trace-Id User-Agent Referer
|
||||||
@ -147,7 +147,7 @@ import socket
|
|||||||
import os
|
import os
|
||||||
import json
|
import json
|
||||||
|
|
||||||
SOCKET_PATH = os.environ.get("MOD_REQIN_LOG_SOCKET", "/var/run/logcorrelator/http.sock")
|
SOCKET_PATH = os.environ.get("MOD_REQIN_LOG_SOCKET", "/var/run/logcorrelator/http.socket")
|
||||||
|
|
||||||
# Remove existing socket file
|
# Remove existing socket file
|
||||||
if os.path.exists(SOCKET_PATH):
|
if os.path.exists(SOCKET_PATH):
|
||||||
@ -199,7 +199,7 @@ These headers are silently skipped (logged at DEBUG level only).
|
|||||||
### Socket Security
|
### Socket Security
|
||||||
|
|
||||||
- **Socket permissions**: Default to `0o660` (owner and group only)
|
- **Socket permissions**: Default to `0o660` (owner and group only)
|
||||||
- **Recommended path**: `/var/run/logcorrelator/http.sock` (not `/tmp`)
|
- **Recommended path**: `/var/run/logcorrelator/http.socket` (not `/tmp`)
|
||||||
- **Environment variable**: Use `MOD_REQIN_LOG_SOCKET` to configure path
|
- **Environment variable**: Use `MOD_REQIN_LOG_SOCKET` to configure path
|
||||||
- **Group membership**: Ensure Apache user is in the socket's group
|
- **Group membership**: Ensure Apache user is in the socket's group
|
||||||
|
|
||||||
@ -227,7 +227,7 @@ ls -la /usr/lib/apache2/modules/mod_reqin_log.so
|
|||||||
### Socket connection failures
|
### Socket connection failures
|
||||||
|
|
||||||
```
|
```
|
||||||
[mod_reqin_log] Unix socket connect failed: /var/run/logcorrelator/http.sock
|
[mod_reqin_log] Unix socket connect failed: /var/run/logcorrelator/http.socket
|
||||||
```
|
```
|
||||||
|
|
||||||
- Ensure the socket consumer is running
|
- Ensure the socket consumer is running
|
||||||
|
|||||||
@ -163,7 +163,7 @@ configuration:
|
|||||||
type: string
|
type: string
|
||||||
context: server-config
|
context: server-config
|
||||||
required_when_enabled: true
|
required_when_enabled: true
|
||||||
example: "/var/run/logcorrelator/http.sock"
|
example: "/var/run/logcorrelator/http.socket"
|
||||||
description: >
|
description: >
|
||||||
Filesystem path of the Unix domain socket to which JSON log lines
|
Filesystem path of the Unix domain socket to which JSON log lines
|
||||||
will be written.
|
will be written.
|
||||||
@ -294,7 +294,7 @@ constraints:
|
|||||||
- Module includes built-in blacklist of sensitive headers to prevent
|
- Module includes built-in blacklist of sensitive headers to prevent
|
||||||
accidental credential leakage (Authorization, Cookie, X-Api-Key, etc.).
|
accidental credential leakage (Authorization, Cookie, X-Api-Key, etc.).
|
||||||
- Socket permissions default to 0o660 (owner+group only) for security.
|
- Socket permissions default to 0o660 (owner+group only) for security.
|
||||||
- Recommended socket path: /var/run/logcorrelator/http.sock (not /tmp).
|
- Recommended socket path: /var/run/logcorrelator/http.socket (not /tmp).
|
||||||
- Use environment variable MOD_REQIN_LOG_SOCKET to configure socket path.
|
- Use environment variable MOD_REQIN_LOG_SOCKET to configure socket path.
|
||||||
- Module does not anonymize IPs; data protection is delegated to configuration.
|
- Module does not anonymize IPs; data protection is delegated to configuration.
|
||||||
- No requests are rejected due to logging failures.
|
- No requests are rejected due to logging failures.
|
||||||
|
|||||||
@ -10,7 +10,7 @@ JsonSockLogEnabled On
|
|||||||
# Unix domain socket path for JSON log output
|
# Unix domain socket path for JSON log output
|
||||||
# Important: if JsonSockLogEnabled is On and this directive is missing/empty,
|
# Important: if JsonSockLogEnabled is On and this directive is missing/empty,
|
||||||
# Apache startup fails due to strict configuration validation.
|
# Apache startup fails due to strict configuration validation.
|
||||||
JsonSockLogSocket "/var/run/logcorrelator/http.sock"
|
JsonSockLogSocket "/var/run/logcorrelator/http.socket"
|
||||||
|
|
||||||
# HTTP headers to include in the JSON log
|
# HTTP headers to include in the JSON log
|
||||||
# Warning: Be careful not to log sensitive headers like Authorization, Cookie, etc.
|
# Warning: Be careful not to log sensitive headers like Authorization, Cookie, etc.
|
||||||
|
|||||||
@ -38,7 +38,7 @@ install -m 644 %{_pkgroot}/%{_sysconfdir}/httpd/conf.d/mod_reqin_log.conf %{buil
|
|||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
* Sun Mar 01 2026 Developer <dev@example.com> - 1.0.6
|
* Sun Mar 01 2026 Developer <dev@example.com> - 1.0.6
|
||||||
- CONF: Change default socket path to /var/run/logcorrelator/http.sock
|
- CONF: Change default socket path to /var/run/logcorrelator/http.socket
|
||||||
- BUILD: Allow Docker cache for RPM builds (remove --no-cache flag)
|
- BUILD: Allow Docker cache for RPM builds (remove --no-cache flag)
|
||||||
|
|
||||||
* Sun Mar 01 2026 Developer <dev@example.com> - 1.0.4
|
* Sun Mar 01 2026 Developer <dev@example.com> - 1.0.4
|
||||||
|
|||||||
@ -116,8 +116,8 @@ static void test_parse_enabled_off(void **state)
|
|||||||
static void test_parse_socket_path_valid(void **state)
|
static void test_parse_socket_path_valid(void **state)
|
||||||
{
|
{
|
||||||
(void)state;
|
(void)state;
|
||||||
const char *result = parse_socket_path("/var/run/logcorrelator/http.sock");
|
const char *result = parse_socket_path("/var/run/logcorrelator/http.socket");
|
||||||
assert_string_equal(result, "/var/run/logcorrelator/http.sock");
|
assert_string_equal(result, "/var/run/logcorrelator/http.socket");
|
||||||
}
|
}
|
||||||
|
|
||||||
/* Test: Parse socket path empty */
|
/* Test: Parse socket path empty */
|
||||||
|
|||||||
Reference in New Issue
Block a user