On Wed, Apr 13, 2016 at 11:04 AM, Molle, Thomas <[email protected]> wrote: >> On Aug 5, 2015 11:08 AM, "dan (ddp)" <[email protected]> wrote: >> > >> > >> > On Aug 5, 2015 11:04 AM, "James Siegel" <[email protected]> wrote: >> > > >> > > Had issue with our nfs shares, went to look for fix. >> > > >> > > I see this comment in >> > > http://osdir.com/ml/ossec-list/2015-06/msg00083.html >> > > In 2.9 we have skip_nfs >> > > >> > > http://ossec-docs.readthedocs.org/en/latest/syntax/head_ossec_config.rootcheck.html?highlight=nfs#element-skip_nfs >> > > >> > > however that doc link is for 2.8.1 >> > > >> > > when I try using <skip_nfs>yes</skip_nfs> in my syscheck config I get >> > > the following >> > > >> > > 2015/08/05 10:41:06 ossec-config(1230): ERROR: Invalid element in the >> > > configuration: 'skip_nfs'. >> > > 2015/08/05 10:41:06 ossec-config(1202): ERROR: Configuration error at >> > > '/var/ossec/etc/ossec.conf'. Exiting. >> > > 2015/08/05 10:41:06 ossec-syscheckd(1202): ERROR: Configuration error >> > > at '/var/ossec/etc/ossec.conf'. Exiting. >> > > ossec-syscheckd did not start >> > > >> > > >> > > I believe this is not functional in 2.8.1??? >> > > >> > >> > Do a quick grep for the option in the ossec source you used to install. >> > I can't remember exactly when it was added. >> > > >>Actually it looks like 2.8.1 was released Sept 9, 2014, and this was added >> Feb 13, 2015. So it's not available in 2.8.1. Please create an issue at the >> ossec docs github, and I'll try to mark it as such soon. >> Github.com/ossec/ossec-docs > >> > > > > The last version is 2.8.3 but the function is not yet implemented. Is it > normal? > >
The feature is marked as "version 2.9" (https://ossec.github.io/docs/syntax/head_ossec_config.rootcheck.html?highlight=skip_nfs#element-skip_nfs). How do you want me to handle future features in the documentation? I was hoping marking the version the feature would be released in would be enough, but apparently not. Should I wait until a new release is made before even looking at the documentation? > > I have no other way to exclude NFS mounts. > > > > Regard, > > Thomas > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
