On Thu, 23 Jul 2009 21:45:23 +0200, Andre Pawlowski <[email protected]> wrote: > I can confirm this problem. I tested ossec 2.1.1 on a Linux system and > added to the default syscheck entries 'realtime="yes"'. Changes on files > in the directory are recognized, but in subfolders the checks are ignored.
The recursive issue should be fixed in the following snapshot: http://www.ossec.net/files/snapshots/ossec-hids-090921.tar.gz -- Michael Starks [I] Immutable Security http://www.immutablesecurity.com Information Security, Privacy and Personal Liberty
