On Tue, Jul 9, 2013 at 8:12 AM, Mohamad Navabi <[email protected]> wrote: > hi all. > > i whant use file syscheck in my file that when file owner chnage ossec > raise alert > but this is not working i add this config in config file: > > <syscheck> > <directories check_owner="yes">C:\test2\test2.txt</directories> > </syscheck> > > why this config not working!? >
Was a baseline scan already performed? Did the owner change? Did another scan complete after the owner changed? > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
