I've installed libapache-mod-security on Ubuntu 10.04. The only configuration file I've been able to find is this one:
# cat /var/lib/dpkg/info/libapache-mod-security.conffiles
/etc/apache2/mods-available/mod-security.load
However, this does not match the configuration file mentioned in the mod_security documentation. It only tells Apache in which directory to find the module. Where are the mod-security rules stored?