new upstream release (3.3.0); modify package compatibility for Stretch

[ossec-hids.git] / contrib / logtesting / 32 / res

diff --git a/contrib/logtesting/32/res b/contrib/logtesting/32/res
index 4ce5102..986a2fd 100644 (file)
--- a/contrib/logtesting/32/res
+++ b/contrib/logtesting/32/res
@@ -6,6 +6,10 @@
 
 **Phase 2: Completed decoding.
        decoder: 'sudo'
+       dstuser: 'dcid'
+       url: '/home/dcid'
+       srcuser: 'root'
+       status: '/usr/bin/vi /etc/sudoers'
 
 **Phase 3: Completed filtering (rules).
        Rule id: '5403'