Imported Upstream version 2.7

[ossec-hids.git] / src / config / syscheck-config.h

diff --git a/src/config/syscheck-config.h b/src/config/syscheck-config.h
index b380e8b..2417587 100755 (executable)
--- a/src/config/syscheck-config.h
+++ b/src/config/syscheck-config.h
@@ -1,4 +1,5 @@
-/* @(#) $Id$ */
+/* @(#) $Id: ./src/config/syscheck-config.h, 2011/09/08 dcid Exp $
+ */
 
 /* Copyright (C) 2009 Trend Micro Inc.
  * All right reserved.
@@ -8,7 +9,7 @@
  * License (version 2) as published by the FSF - Free Software
  * Foundation
  */
-       
+
 
 #ifndef __SYSCHECKC_H
 #define __SYSCHECKC_H
@@ -42,43 +43,45 @@ typedef struct _rtfim
 
 typedef struct _config
 {
-    int tsleep;
+    int tsleep;            /* sleep for sometime for daemon to settle */
     int sleep_after;
-    int rootcheck;
-    int disabled;
+    int rootcheck;         /* set to 0 when rootcheck is disabled */
+    int disabled;          /* is syscheck disabled? */
     int scan_on_start;
     int realtime_count;
-    
-    int time;
-    int queue;
-    
-    int *opts;
 
-    char *workdir;
+    int time;              /* frequency (secs) for syscheck to run */
+    int queue;             /* file descriptor of socket to write to queue */
+
+    int *opts;             /* attributes set in the <directories> tag element */
+
+    char *workdir;         /* set to the DEFAULTDIR (/var/ossec) */
     char *remote_db;
     char *db;
 
-    char *scan_day;
-    char *scan_time;
-    
-       char **ignore;
-    void **ignore_regex;
-    
-       char **dir;
+    char *scan_day;        /* run syscheck on this day */
+    char *scan_time;       /* run syscheck at this time */
+
+    char **ignore;         /* list of files/dirs to ignore */
+    void **ignore_regex;   /* regex of files/dirs to ignore */
+
+    char **dir;            /* array of directories to be scanned */
     void **filerestrict;
 
     /* Windows only registry checking */
     #ifdef WIN32
-       char **registry_ignore;
-    void **registry_ignore_regex;
-       char **registry;
+    char **registry_ignore;         /* list of registry entries to ignore */
+    void **registry_ignore_regex;   /* regex of registry entries to ignore */
+    char **registry;                /* array of registry entries to be scanned */
     FILE *reg_fp;
     #endif
-    
+
     void *fp;
 
     rtfim *realtime;
 
+    char *prefilter_cmd;
+
 }config;
 
 #endif