I had to remove <check_policy> from /var/ossec/etc/shared/agent.conf. I also had a typo on MY side for the rootkit_ and system_audit file paths.
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.