You should reinstall the binaries. Most of them chroot to the directory they were compiled to be in. I think the rest of the system should work fine if you move it. You could try copying it (preserving permissions, etc.) and doing an "upgrade" to change out the binaries.
On Fri, Aug 6, 2010 at 2:33 PM, JW <[email protected]> wrote: > I've got OSSEC running on a series of RHEL machines, installed > originally under /home/ossec > I've been asked to move it to a different directory, like /home/ > monitors/ossec > Can I just stop OSSEC, mv the ossec directory, and restart? It looks > like I don't even need to edit the initscript, as I'd expected. Are > there any gotchas I should know about? > Thanks for any advice - JW
