I successfully restarted ossec 2.0 with the mcafee rules commented out on both OpenBSD and Centos. dan
On Tue, Mar 3, 2009 at 12:20 PM, Peter M. Abraham <[email protected]> wrote: > > Greetings: > > There is a bug in ossec 2 server where if you comment out the > "<include>mcafee_av_rules.xml</include>" in /var/ossec/ossec.conf > ossec will then not restart properly. > > Please fix this bug. > > Also, I've reported in the past that all upgrades to date absolutely > destroy customizations of what rules are included in ossec.conf > > This makes upgrading harder because you then have to go back in to > comment out inapplicable rules. > > Thank you. >
