Hi!
I installed the default OSSEC SERVER 2.7.1-beta-1 on Debian 7.
This is my */var/ossec/etc/ossec.conf*:
[...]
<syscheck>
<!-- Frequency that syscheck is executed - default to every 22 hours -
79200 -->
<frequency>*300*</frequency>
<alert_new_files>yes</alert_new_files>
<!-- Directories to check (perform all possible verifications) -->
<directories check_all="yes">/etc,/usr/bin,/usr/sbin</directories>
<directories check_all="yes">/bin,/sbin</directories>
<directories realtime="yes"
check_all="yes">/root/integrity</directories>
[...]
</syscheck>
[...]
My */etc/crontab*:
[...]
*/1 * * * * root /script.sh
[...]
And my* /script.sh*:
#!/bin/bash
/bin/touch /root/integrity/check-`date +%Y-%m-%d_%Hh%M`
/bin/echo `date +%Y-%m-%d_%Hh%M` >> /root/integrity/check
The files are created in */root /integrity* but no changes in OSSEC WUI 0.8b
.
Tks
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
