add ossec.conf to extra