Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unable to trac file integrity changes in my custom directory #2138

Open
abhi1551994 opened this issue Dec 5, 2024 · 0 comments
Open

unable to trac file integrity changes in my custom directory #2138

abhi1551994 opened this issue Dec 5, 2024 · 0 comments

Comments

@abhi1551994
Copy link

abhi1551994 commented Dec 5, 2024

Hey guys, I'm trying to monitor any file changes under directory /path/to/file/
any files modification done as root user or using sudo access I can see alerts on my master ossec node
but any file modifications done by normal user I cannot see any alerts triggered.

I have added below lines in my /var/ossec/etc/ossec.conf file

<directories report_changes="yes" realtime="yes" check_all="yes">/client/tybatch/citi/shell/*.sh</directories> <directories report_changes="yes" realtime="yes" check_all="yes">/client/tybatch/citi/shell/*.ksh</directories>

Could someone please help me if I'm missing anything more to update

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant