I have a directory /var/www/html/QUARANTINE I would like rootcheck to ignore.
I looked at the document http://www.ossec.net/doc/manual/rootcheck/manual-rootcheck.html and it mentions ignore and auto_ignore options in the first paragraph of Configuration Options but then they are not described anywhere in the options list. How do they work? Where do they go? Also, item #4 at the top of the document says "Scan the whole filesytem ...". Just the root filesystem? All local filesystems? I see an option "scanall" listed that defaults to "no" but it is not clear what "whole system" means and what the subset scanned is if the answer is "no". Thanks -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
