[osiris] Re: responses to integrity check failure

[Alan Sparks]

David Vasil wrote:
> Darren Spruell wrote:
>   
>> Does Osiris provide for j(or is there a commonly suggested method of)
>> setting up configurable responses to detected integrity check
>> failures?
>>     
>
> Active response is not currently a feature of Osiris.
>   
There is/was a feature introduced in around 4.1.3 in the osirismd.conf
called "notify_app".  Took a path to an executable that got the report
information.  Not sure if it still works, apparently has never been made
official.  I played with it myself a year ago, but ultimately went a
different direction.  See an exchange between me and Brian at
http://osiris.shmoo.com/pipermail/osiris/2005-March/000776.html
-Alan

-- 
Alan Sparks, UNIX/Linux Systems Integration and Administration
<asparks at doublesparks.net>