[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#978628: Acknowledgement (apache2: add privacy LogFormats to apache2.conf)

Control: found -1 2.4.46-2
Control: tags -1 patch

This is also in a merge request:

Ignore the previously attached patch. The merge request or the patch attached to this email are preferred.

>From 7877dda30975cac9232591f375cc09d71b152564 Mon Sep 17 00:00:00 2001
From: Hans-Christoph Steiner <eighthave@debian.org>
Date: Tue, 29 Dec 2020 11:53:36 +0000
Subject: [PATCH 1/1] add privacy LogFormats to apache2.conf

The standard LogFormats log detailed information which falls
under data regulations like the EU's GDPR and California's CCPA.
This merge request adds "privacy" LogFormat options for logging
that cannot be used to identify users.  This has been developed
and used by Tor Project and Guardian Project.

 debian/config-dir/apache2.conf.in | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/debian/config-dir/apache2.conf.in b/debian/config-dir/apache2.conf.in
index 72220aab..4b6b7202 100644
--- a/debian/config-dir/apache2.conf.in
+++ b/debian/config-dir/apache2.conf.in
@@ -206,6 +206,9 @@ AccessFileName .htaccess
 # requested file), because the latter makes it impossible to detect partial
 # requests.
+# The "privacy" format follows the format of the "combined" LogFormat but
+# with Personally Identifiable Information (PII) stripped out.
 # Note that the use of %{X-Forwarded-For}i instead of %h is not recommended.
 # Use mod_remoteip instead.
@@ -214,6 +217,8 @@ LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combine
 LogFormat "%h %l %u %t \"%r\" %>s %O" common
 LogFormat "%{Referer}i -> %U" referer
 LogFormat "%{User-agent}i" agent
+LogFormat "%v:%p - - %{[%d/%b/%Y:00:00:00 %z]}t \"%r\" %>s %O \"%{Referer}i\" \"-\"" vhost_privacy
+LogFormat " - - %{[%d/%b/%Y:00:00:00 %z]}t \"%r\" %>s %O \"%{Referer}i\" \"-\"" privacy
 # Include of directories ignores editors' and dpkg's backup files,
 # see README.Debian for details.

Reply to: