new upstream release (3.3.0); modify package compatibility for Stretch

[ossec-hids.git] / contrib / logtesting / 11 / res

diff --git a/contrib/logtesting/11/res b/contrib/logtesting/11/res
index a132a0f..f6cb867 100644 (file)
--- a/contrib/logtesting/11/res
+++ b/contrib/logtesting/11/res
@@ -10,9 +10,9 @@
        dstuser: 'root'
 
 **Phase 3: Completed filtering (rules).
-       Rule id: '5303'
-       Level: '3'
-       Description: 'User successfully changed UID to root.'
+       Rule id: '5305'
+       Level: '4'
+       Description: 'First time (su) is executed by user.'
 **Alert to be generated.