On 2010 Jan 05 (Tue) at 06:25:59 -0600 (-0600), Chris Bennett wrote: :I don't use a lot of conf files in conf/modules, but yesterday I :edited my php.conf and httpd.conf. :The two changes were tied to each other for a specific change. : :I just got my insecurity output. It only listed changes to httpd.conf. :There was nothing about change to php.conf. : :For a while now, since 4.3 httpd.conf has: :Include /var/www/conf/modules/*.conf : :Since all conf files in conf/modules essentially ARE httpd.conf as of :a restart, why aren't these files tracked also?
The insecurity report only looks to see if the file itself has changed. It does not parse the files and pull in the includes. You'd have to add those files to /etc/changelist yourself. -- It is against the law for a monster to enter the corporate limits of Urbana, Illinois.
