ossec/ossec-hids — pull request #471 by reyjrar (2014-12-23 17:28:51+00:00)
Title: Add bool to rootcheck and syscheck to skip NFS mounted partitions

This is only implemented for Linux and FreeBSD as they are the only OS's I can track down decent documentation on how to accomplish this. If this variable is set to "yes" and the feature isn't availble, a verbose error message is output to the OSSEC log file and the check returns false so the calling function will scan the directory as normal.

Need to document the change in ossec-docs, but basically adds a

no

To the rootcheck and syscheck configurations. To disable scanning of NFS shares:

yes

Comments?