On Fri, Apr 22, 2016 at 4:29 AM, Victor Fernandez <[email protected]> wrote: > I think the problem is the option "-h", because it introduces arbitrary line > feeds in order to be more readable by people, but it makes more difficult to > decode. This happened in RHEL5 but it can happen at any system with a long > filesystem path. > > "-P" is an interesting option to preserve compatibility. So I think the best > solution is to use only "df" or "df -P" at "ossec.conf" and rule 531. > > Thank you for letting us know! >
Do you want to open a PR on the ossec github for this? It seems like a decent change to make. > Regards. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
