Merge pull request #1593 from ddpbsd/perm_chg

Allow permission changes to make it into the email alert.
ossec · Dec 11, 2018 · 814b47c · 814b47c
2 parents 799b43d + 8312d24
commit 814b47c
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/os_maild/os_maild_client.c b/src/os_maild/os_maild_client.c
@@ -100,6 +100,16 @@ MailMsg *OS_RecvMailQ(file_queue *fileq, struct tm *p,
             body_size -= log_size;
         }
     }
+    if (al_data->perm_chg) {
+       log_size = strlen(al_data->perm_chg) + 17 + 4;
+       if (body_size > log_size) {
+           strncat(logs, "Permission change: ", 20);
+           strncat(logs, al_data->perm_chg, body_size);
+           strncat(logs, "\r\n", 4);
+           body_size -= log_size;
+       }
+    }
+
 
     /* EXTRA DATA */
     if (al_data->srcip) {