[ossec-list] Re: ossec removal question

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi Barbaros,

I remember that someone in the past sent me a script to remove ossec, but I
never got around to integrate it with ossec (whosoever did it, please send to me
again).

Anyway, the easiest way to remove ossec is to do the following:

-Remove /var/ossec
-Remove the init script (generally /etc/init.d/ossec and all the
references on /etc/rc.X)
-Remove all the ossec users
-Remove /etc/ossec-init.conf

Hope it helps.

--
Daniel B. Cid
dcid ( at ) ossec.net

On 7/21/07, Barbaros Usekes <bonjurkes@xxxxxxxxx> wrote:
> Hello,
>
> I installed ossec to my server yesterday, for trying it and now i want to
> remove it but i dont know how to do it. I am a newbie.
>
> I just deleted ossec files and folders, and when my server starts it tries
> to start ossec also and it gives error as :
>
> Starting OSSEC: /etc/init.d/ossec: line 36: /var/ossec/bin/ossec-control: No
> such file or directory
>
> This error is because i deleted most (i thought i deleted all) files and
> folders of ossec, but it seems not.
>
> I guess i need to also remove /etc/init.d/ossec.
>
> Am i doing things right or is there a different removal method?
>