access log support for cpanel webdav(webdisk)

[Support-SG]

Hello,

it would be great to add a logging feature for cpanel webdav(cpdavd) like for ftp, so any action of a cpanel user(upload/download a file etc) via webdav is being logged into a log file.

Thanks

[paneller]

Hello,

considering the recent vulnerability descovered in cPDAVd this feature become very important.

[jpswade]

As per the above and this vulnerability: 82646: cPanel cPDAVd Filename Parsing Remote Code Execution

In additional, it's difficult to diagnose errors as per: http://forums.cpanel.net/f5/using-we...ve-280242.html

Without logging for debugging it renders cPDAVd useless to me, so this is quite important.

[cPanelKenneth]

Until we add support for a cpdavd access log, you can get more information logged by the service by enabling debug mode in /usr/local/cpanel/libexec/cpdavd. Change the following line

    'debug' => 0,

to

    'debug' => 1,

and restart cpdavd. A lot of extra information is logged by doing this. You might want to test it before doing the change on all servers.