Syscheck warning on missing directory specified in ossec agent configuration

[emkll]

Bug

Description

As of release 0.5.2, ossec logs contain a large number of the following warning message:

2018/02/02 14:12:46 ossec-syscheckd: WARN: Error opening directory: '/var/lib/tor/services/hostname': No such file or directory 

Steps to Reproduce

• ssh into mon
• cat /var/ossec/logs/ossec.log
• observe a large amount of the following warning message:

2018/02/02 14:12:46 ossec-syscheckd: WARN: Error opening directory: '/var/lib/tor/services/hostname': No such file or directory 

Expected Behavior

Warning should not appear in ossec logs, ossec configuration should specify files/folder that exist.

Actual Behavior

Warning appears in ossec logs, ossec configuration does not contain files/folders that exist.

Comments

https://github.com/freedomofpress/securedrop/blob/develop/install_files/securedrop-ossec-agent/var/ossec/etc/ossec.conf#L16 specifies the path, which has likely been removed as of tor 0.3.2.*