[ossec-dev] Ossec, prelude and chroot

[Sebastien Tricaud <toady@xxxxxxxxxx>]

Hi folks,


the following patch fixes the issue of prelude unable to work when Ossec
because of chroot restrictions.

The prelude layer must be initiated before the chroot, in order to keep
the coherence with any sensor working along with prelude.



Regards,
Sebastien.

? prelude-chroot.0.patch
Index: src/analysisd/analysisd.c
===================================================================
RCS file: /usr/cvsroot/ossec-hids/src/analysisd/analysisd.c,v
retrieving revision 1.125
diff -r1.125 analysisd.c
246a247,250
>     /* Starting prelude */
>     #ifdef PRELUDE
>     prelude_start(argc, argv);
>     #endif
403,409d406
< 
< 
<     /* Starting prelude */
<     #ifdef PRELUDE
<     prelude_start(argc, argv);
<     #endif
< 
Index: src/analysisd/prelude.c
===================================================================
RCS file: /usr/cvsroot/ossec-hids/src/analysisd/prelude.c,v
retrieving revision 1.2
diff -r1.2 prelude.c
254a255,256
>     prelude_client_send_idmef(prelude_client, idmef);
>