Hi,
I have configured several paths in <nodiff>...</nodiff> in the
/var/ossec/etc/ossec-server.conf. For example I have
<nodiff>/etc/letsencrypt/live/example.com/privkey.pem</nodiff>
Nevertheless I receive messages with changes like this
Rule: 552 fired (level 7) -> "Integrity checksum changed again (3rd time)."
Portion of the log(s):
Integrity checksum changed for:
'/etc/letsencrypt/live/example.com/privkey.pem'
What changed:
[...]
I tried putting all such paths delimited with commas on one line between
one pair of <nodiff>...</nodiff> and every path on the line of its own
between its own pair <nodiff>...</nodiff>. The result is the same.
What am I doing wrong?
Best regards,
Michael Dukelsky
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ossec-list/3cb8d1ff-5966-1979-9be3-fbccd8fd578c%40mail.ru.
