Hey,
I tried to disabled the rootcheck on one of the servers.
I have added the following line to the agent.conf file -
<rootcheck>
<disabled>yes</disabled>
</rootcheck>
and after I am restarting the service I get the following output -
Starting ossec-hids: 2016/04/14 06:16:27 ossec-rootcheck: Rootcheck
disabled. Exiting.
ossec-syscheckd: WARN: Rootcheck module disabled.
and a few min later I see in the logs that the rootcheck is running again.
any one have an idea why did I miss?
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
