Is there documentation that explains what a glob is? This worked fine with 2.7.
On Mon, Apr 23, 2018 at 12:53 PM dan (ddp) <[email protected]> wrote: > > > On Mon, Apr 16, 2018 at 2:08 PM, Cooper <[email protected]> wrote: > >> I am getting the following error from syscheckd when starting up OSSEC >> 2.9.3: >> >> 2018/04/16 13:01:14 ossec-analysisd: INFO: Reading rules file: >> 'sshd_rules.xml' >> 2018/04/16 13:01:14 ossec-syscheckd(1121): ERROR: Glob error. Invalid >> pattern: '/home/*/.ssh'. >> 2018/04/16 13:04:35 ossec-analysisd: INFO: Reading rules file: >> 'sshd_rules.xml' >> 2018/04/16 13:04:35 ossec-syscheckd(1121): ERROR: Glob error. Invalid >> pattern: '/home/*/.ssh/'. >> >> Inside of my ossec.conf file, I have this line, which seems to be >> generating the error: >> >> <directories check_all="yes">/home/*/.ssh/</directories> >> >> Any idea what is invalid about that pattern? >> >> -- >> > > I don't think globs are valid in the syscheck configuration. > > > >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. >> > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
