This patch will allow ossec-syscheckd -t to show xml parsing errors in
the agent.conf on agent systems. It makes debugging the config easier.
-OSSEC version number.
git head as of 2015.8.11
-Content of /etc/ossec-init.conf
DIRECTORY="/usr/local/ossec-git"
VERSION="v2.8"
DATE="Tue Aug 11 18:17:15 EDT 2015"
TYPE="agent"
-Content of /var/ossec/etc/ossec.conf
I've X-ed out my server IP.
<ossec_config>
<client>
<server-ip>X.X.X.X</server-ip>
<port>1517</port>
</client>
</ossec_config>
-Content of /var/ossec/logs/ossec.log
2015/08/11 18:25:03 ossec-syscheckd(1226): ERROR: Error reading XML file
'/usr/local/ossec-git/etc/shared/agent.conf': XMLERR: Attribute 'check_all' not
followed by a " or '. (line 247).
-Operating system name/version (uname -a if Unix)
Linux obsession.nss.udel.edu 3.19.0-15-generic #15-Ubuntu SMP Thu Apr 16
23:32:37 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
-Any other relevant information.
--- ossec-hids-git/src/config/config.c 2015-08-11 16:20:43.775714079 -0400
+++ ossec-hids-git-udel/src/config/config.c 2015-08-11 18:16:32.884138569 -
0400
@@ -154,9 +154,9 @@
if (OS_ReadXML(cfgfile, &xml) < 0) {
if (modules & CAGENT_CONFIG) {
-#ifndef CLIENT
+//#ifndef CLIENT
merror(XML_ERROR, __local_name, cfgfile, xml.err, xml.err_line);
-#endif
+//#endif
} else {
merror(XML_ERROR, __local_name, cfgfile, xml.err, xml.err_line);
}
Cheers,
Doke
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
