> On Aug 5, 2015 11:08 AM, "dan (ddp)" <[email protected]<javascript:>> wrote: > > > > > > On Aug 5, 2015 11:04 AM, "James Siegel" <[email protected]<javascript:>> > > wrote: > > > > > > Had issue with our nfs shares, went to look for fix. > > > > > > I see this comment in http://osdir.com/ml/ossec-list/2015-06/msg00083.html > > > In 2.9 we have skip_nfs > > > http://ossec-docs.readthedocs.org/en/latest/syntax/head_ossec_config.rootcheck.html?highlight=nfs#element-skip_nfs > > > > > > however that doc link is for 2.8.1 > > > > > > when I try using <skip_nfs>yes</skip_nfs> in my syscheck config I get the > > > following > > > > > > 2015/08/05 10:41:06 ossec-config(1230): ERROR: Invalid element in the > > > configuration: 'skip_nfs'. > > > 2015/08/05 10:41:06 ossec-config(1202): ERROR: Configuration error at > > > '/var/ossec/etc/ossec.conf'. Exiting. > > > 2015/08/05 10:41:06 ossec-syscheckd(1202): ERROR: Configuration error at > > > '/var/ossec/etc/ossec.conf'. Exiting. > > > ossec-syscheckd did not start > > > > > > > > > I believe this is not functional in 2.8.1??? > > > > > > > Do a quick grep for the option in the ossec source you used to install. I > > can't remember exactly when it was added. > >
>Actually it looks like 2.8.1 was released Sept 9, 2014, and this was added Feb >13, 2015. So it's not available in 2.8.1. Please create an issue at the ossec >docs github, and I'll try to mark it as such soon. Github.com/ossec/ossec-docs > The last version is 2.8.3 but the function is not yet implemented. Is it normal? I have no other way to exclude NFS mounts. Regard, Thomas -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
