Adding some additional sshd rules
Adding logs to named.ini for testing
Move the sshd tests into their own ini
Merge pull request #43 from joshgarnett/master

Adding some additional sshd rules
Active response was not passing the filename in file events, ie,
syscheck.  The Eventinfo struct only included file data for builds with
Prelude integration.  This prevented the AR from handing filename off
anyways.
* Eventinfo now contains file data always
* Added *expect* option for 'filename'
* Added FILENAME to ar.h
* Filename validation is tricky, so shell escape instead
  * Added os_shell_escape() to string_op.h, allocates memory for an
    escaped string and passes the pointer back to caller. Caller must
    cleanup that memory.
  * Call os_shell_escape() before passing to execd.
* Added string_test.c to test the os_shell_escape() function.
Fixes to exec.c by Micha Nasriachi
apply inode problem fix patch
Merge pull request #45 from reyjrar/fix/high-inode-usage

Disable /var/ossec/queue/diff/*state.$epoch files, they were not used.
Merge pull request #44 from reyjrar/feature/activeresponse-filename

Feature: activeresponse with filename
Convert csyslog JSON output to use the cJSON library.
Git ignore for files which we build
Ignore cJSON.h
Linking and libraries sorted out.
Something isn't building, guessing that it's the eventchannel stuff.
Fully remove the event channel stuff.
I guess this is stupid too.
Merge pull request #49 from reyjrar/fix/use-cjson-csyslogd

Use cJSON instead of writing a custom JSON output format.