new upstream release (3.3.0); modify package compatibility for Stretch

[ossec-hids.git] / etc / ossec-agent.conf

diff --git a/etc/ossec-agent.conf b/etc/ossec-agent.conf
old mode 100755 (executable)
new mode 100644 (file)
index 3afca95..83ba36b
--- a/etc/ossec-agent.conf
+++ b/etc/ossec-agent.conf
@@ -6,20 +6,24 @@
   </client>
 
   <syscheck>
-    <!-- Frequency that syscheck is executed -- default every 2 hours -->
+    <!-- Frequency that syscheck is executed (default every 2 hours) -->
     <frequency>7200</frequency>
-    
+
     <!-- Directories to check  (perform all possible verifications) -->
     <directories check_all="yes">/etc,/usr/bin,/usr/sbin</directories>
-    <directories check_all="yes">/bin,/sbin</directories>
+    <directories check_all="yes">/bin,/sbin,/boot</directories>
 
     <!-- Files/directories to ignore -->
     <ignore>/etc/mtab</ignore>
     <ignore>/etc/hosts.deny</ignore>
     <ignore>/etc/mail/statistics</ignore>
     <ignore>/etc/random-seed</ignore>
+    <ignore>/etc/random.seed</ignore>
     <ignore>/etc/adjtime</ignore>
     <ignore>/etc/httpd/logs</ignore>
+
+    <!-- Check the file, but never compute the diff -->
+    <nodiff>/etc/ssl/private.key</nodiff>
   </syscheck>
 
   <rootcheck>