Table Of Contents

OSSEC Links

ossec-syscheckd

The ossec-syscheckd daemon checks configured files for changes to the checksums, permissions or ownership. ossec-syscheckd is started by ossec-control. Configuration for ossec-syscheckd is handled in the ossec.conf.

See Syscheck for more detailed configuration information.

ossec-syscheckd argument options

-d

Run in debug mode.

-V

Version and license information.

-h

Display the help message.

-t

Test configuration.

-f

Run ossec-syscheckd in the foreground.

-u <user>

Run ossec-syscheckd as <user>.

Default: ossecm

-g <group>

Run ossec-syscheckd as <group>.

-c <config>

Run ossec-syscheckd using <config> as the configuration file.

Default: /var/ossec/etc/ossec.conf

-D <dir>

Chroot to <dir>.

Default: /var/ossec