Hi, I am using ossec-1.6.5 on a distributed file system which doesn't support group (actually, this is due to an old version of FUSE module.) Therefore the file "/queue/alerts/execq" is accessible by its group:
/====================================================== cd /opt/ossec.agent.osxcad0/queue/alerts && ls -ltr total 0 srw-rw---- 1 root ossec 0 2010-10-25 02:57 execq= \====================================================== On agents, there's only "ossec" user. Can I update the owner of that file, by "chown ossec:ossec execq"? If "yes", can the same method be applied on Ossec's master? Thank your for your helps, -- Anh Ky Huynh
