Ok, it's my fault, I did not read the documentation in the right place. Yet this is clear when I read the right doc.
Thx. -----Message d'origine----- De : [email protected] [mailto:[email protected]] De la part de dan (ddp) Envoyé : mercredi 13 avril 2016 17:10 À : [email protected] Objet : Re: [ossec-list] skip_nfs appearing in 2.8.1 documentation but I get error when using?? On Wed, Apr 13, 2016 at 11:04 AM, Molle, Thomas <[email protected]> wrote: >> On Aug 5, 2015 11:08 AM, "dan (ddp)" <[email protected]> wrote: >> > >> > >> > On Aug 5, 2015 11:04 AM, "James Siegel" <[email protected]> wrote: >> > > >> > > Had issue with our nfs shares, went to look for fix. >> > > >> > > I see this comment in >> > > http://osdir.com/ml/ossec-list/2015-06/msg00083.html >> > > In 2.9 we have skip_nfs >> > > >> > > http://ossec-docs.readthedocs.org/en/latest/syntax/head_ossec_con >> > > fig.rootcheck.html?highlight=nfs#element-skip_nfs >> > > >> > > however that doc link is for 2.8.1 >> > > >> > > when I try using <skip_nfs>yes</skip_nfs> in my syscheck config I >> > > get the following >> > > >> > > 2015/08/05 10:41:06 ossec-config(1230): ERROR: Invalid element in >> > > the >> > > configuration: 'skip_nfs'. >> > > 2015/08/05 10:41:06 ossec-config(1202): ERROR: Configuration >> > > error at '/var/ossec/etc/ossec.conf'. Exiting. >> > > 2015/08/05 10:41:06 ossec-syscheckd(1202): ERROR: Configuration >> > > error at '/var/ossec/etc/ossec.conf'. Exiting. >> > > ossec-syscheckd did not start >> > > >> > > >> > > I believe this is not functional in 2.8.1??? >> > > >> > >> > Do a quick grep for the option in the ossec source you used to install. >> > I can't remember exactly when it was added. >> > > >>Actually it looks like 2.8.1 was released Sept 9, 2014, and this was >>added Feb 13, 2015. So it's not available in 2.8.1. Please create an >>issue at the ossec docs github, and I'll try to mark it as such soon. >> Github.com/ossec/ossec-docs > >> > > > > The last version is 2.8.3 but the function is not yet implemented. Is > it normal? > > The feature is marked as "version 2.9" (https://ossec.github.io/docs/syntax/head_ossec_config.rootcheck.html?highlight=skip_nfs#element-skip_nfs). How do you want me to handle future features in the documentation? I was hoping marking the version the feature would be released in would be enough, but apparently not. Should I wait until a new release is made before even looking at the documentation? > > I have no other way to exclude NFS mounts. > > > > Regard, > > Thomas > > -- > > --- > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
