diff -r f547b31fc670 src/init/update.sh
--- a/src/init/update.sh	Fri Feb 01 13:09:21 2013 -0500
+++ b/src/init/update.sh	Fri Feb 01 13:10:00 2013 -0500
@@ -136,7 +136,7 @@
     grep -Ev "</*rules>|<include>|rules global entry" ${OSSEC_CONF_FILE} > "${OSSEC_CONF_FILE}.$$.tmp"
 
     # Check for custom files that may have been added in <rules> element
-    for i in $(grep -E '<include>|<list>' ${OSSEC_CONF_FILE} | grep -v '<!--')
+    for i in `grep -E '<include>|<list>' ${OSSEC_CONF_FILE} | grep -v '<!--'`
     do
       grep "$i" ${RULES_TEMPLATE}>/dev/null || echo "    $i" >> "${OSSEC_CONF_FILE}.$$.tmp2"
     done