Hi all, i have problem with syscheck file integrity and oracle instance. I want to monitoring /oracle/product/10.2.0/db/network/admin directory (or only listener.ora).
My config (for this): <directories check_all="yes">/etc,/oracle/product/10.2.0/db/network/admin</directories> and only file: <directories check_all="yes">/oracle/product/10.2.0/db/network/admin/listener.ora</directories> If i change listener.ora file, ossec doesn't show me information about this. OSSEC have permissions to this directory (add ossec user to oinstall group). Any ideas? :)
