On Mon, Nov 24, 2014 at 10:09 AM, <[email protected]> wrote: > Thanks for the answer. > The files inside /root are indeed monitored correctly by syscheck (I have > verified this point) but not the directory itself. > So there is no way to tell syscheck to monitor a directory AND the files > inside this directory? It seems incredible... >
Sounds like a great time to send a patch! >>Le lundi 24 novembre 2014 15:52:50 UTC+1, dan (ddpbsd) a écrit : >> >> > >> >I think you've configured it to look for files inside /root. You can >> >verify this by looking for '/root' in the syscehck db for that system. >> >I don't know of a way to specify a directory directly. >> >> > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
