Ensure the Log Config Module Is Enabled

Details

The ‘log_config’ module provides for flexible logging of client requests and for the configuration of the information in each log.

Rationale:

Logging is critical for monitoring usage and potential abuse of your web server. To configure web server logging using the ‘log_format’ directive, this module is required.

Solution

Perform either one of the following:
– For source builds with static modules, run the Apache ‘./configure’ script without including the ‘–disable-log-config’ script options.

$ cd $DOWNLOAD/httpd-2.2.22
$ ./configure

– For dynamically loaded modules, add or modify the ‘LoadModule’ directive so that it is present in the Apache configuration as below and not commented out:

LoadModule log_config_module modules/mod_log_config.so

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles