Allow to set SecAuditLog

[sathieu]

No description provided.

[bmjen]

@sathieu This logic is confusing. You should always check the "manage" boolean first and determine path variables after. Something like:

if $mod_audit_log {
  if $modsec_audit_log_file {
    $modsec_audit_log_destination = "${logroot}/${modsec_audit_log_file}"
  } else if $modsec_audit_log_pipe { 
    $modsec_audit_log_destination = $modsec_audit_log_pipe
  } else {
    if $ssl {
       $modsec_audit_log_destination = "${logroot}/${name}_security_ssl.log"
     } else {
       $modsec_audit_log_destination = "${logroot}/${name}_security.log"
     }
} else {
    $modsec_audit_log_destination = undef
}

This way you only set variables/paths if $modsec_audit_log is set to true.

[sathieu]

My intention was that you only need to set one attribute to enable logging.

I've changed the code a bit to improve this.