Thanks for the answer. The files inside /root are indeed monitored correctly by syscheck (I have verified this point) but not the directory itself. So there is no way to tell syscheck to monitor a directory AND the files inside this directory? It seems incredible...
>Le lundi 24 novembre 2014 15:52:50 UTC+1, dan (ddpbsd) a écrit : > > > > >I think you've configured it to look for files inside /root. You can > >verify this by looking for '/root' in the syscehck db for that system. > >I don't know of a way to specify a directory directly. > > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
