Skip to content

Comments

Allow permission changes to make it into the email alert.#1593

Merged
atomicturtle merged 1 commit intoossec:masterfrom
ddpbsd:perm_chg
Dec 11, 2018
Merged

Allow permission changes to make it into the email alert.#1593
atomicturtle merged 1 commit intoossec:masterfrom
ddpbsd:perm_chg

Conversation

@ddpbsd
Copy link
Member

@ddpbsd ddpbsd commented Dec 11, 2018

It looks like ossec-maild was never setup to pass on permissions changes (or that was lost somewhere over the years I dunno).

Fixes issue #1571 reported by @junqian1992

Before:

Received From: ossec-builder->syscheck
Rule: 552 fired (level 7) -> "Integrity checksum changed again (3rd time)."
Portion of the log(s):

Integrity checksum changed for: '/var/test/one'

After:

Received From: ossec-builder->syscheck
Rule: 552 fired (level 7) -> "Integrity checksum changed again (3rd time)."
Portion of the log(s):

Integrity checksum changed for: '/var/test/three'
Permission change: 'rw-r--r--' to '---------'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants