blob: 2c1210d270876105efe28a7c1d3c4fbc813b7700 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
SYSCHECK_MANAGED_CONF= 130.syscheck.conf
SYSCHECK_LOCAL_CONF= 530.syscheck.local.conf
SYSCHECK_PROFILE= syscheck
SYSCHECK_DESC= File Integrity Checking
# Default direcotries
SYSCHECK_DEFAULT_OPTION= DEFAULT_SC
SYSCHECK_DEFAULT_DESC= Check "bin", "sbin" and "etc" directories
SYSCHECK_DEFAULT_DEFINE= server local agent pushed
SYSCHECK_DEFAULT_DEFAULT= server local pushed
SYSCHECK_OPTIONS+= SYSCHECK_DEFAULT
# OSSEC directories
SYSCHECK_OSSEC_OPTION= OSSEC_SC
SYSCHECK_OSSEC_DESC= Check OSSEC directories
SYSCHECK_OSSEC_DEFINE= server local agent pushed
SYSCHECK_OSSEC_DEFAULT= server local pushed
SYSCHECK_OPTIONS+= SYSCHECK_OSSEC
# Alert new files
SYSCHECK_NEWFILES_OPTION= NEWFILES_SC
SYSCHECK_NEWFILES_DESC= Alert on new files created
SYSCHECK_NEWFILES_DEFINE= server local
SYSCHECK_NEWFILES_DEFAULT= server local
SYSCHECK_OPTIONS+= SYSCHECK_NEWFILES
# Disable auto_ignore
SYSCHECK_NOAUTO_OPTION= NOAUTO_SC
SYSCHECK_NOAUTO_DESC= Disable auto_ignore feature
SYSCHECK_NOAUTO_DEFINE= server local
SYSCHECK_NOAUTO_DEFAULT= server local
SYSCHECK_OPTIONS+= SYSCHECK_NOAUTO
# Ignore /etc/hosts.allow
SYSCHECK_HOSTDENY_DEPENDS= AR_HOSTDENY
SYSCHECK_HOSTDENY_OPTION= HOSTDENY_SC
SYSCHECK_HOSTDENY_DESC= Ignore access control files
SYSCHECK_HOSTDENY_DEFINE= server local agent pushed
SYSCHECK_HOSTDENY_DEFAULT= server local pushed
SYSCHECK_OPTIONS+= SYSCHECK_HOSTDENY
|
