Hey, I added the <ignore> option to Rootcheck, so you can specify your NFS shares in there to avoid scanning them.
It is available on the latest snapshot: http://ossec.net/files/snapshots/ossec-hids-090723.tar.gz Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Thu, Jul 23, 2009 at 6:45 AM, Andrew Jones<andyjones2...@gmail.com> wrote: > > We also have servers with nfs shares mounted. > > Is it possible to configure rootcheck to not scan nfs shares? I can't > find much info on it. > > > thanks > >
