@dir(,ossec,0550) %%OSSEC_HOME%%
@dir(,ossec,0550) %%OSSEC_HOME%%/active-response
@dir(,ossec,0550) %%OSSEC_HOME%%/active-response/bin
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/merge-config.sh
@dir(,,0550) %%OSSEC_HOME%%/bin
@dir(,,0550) %%OSSEC_HOME%%/bin/command
@(,,0550) %%OSSEC_HOME%%/bin/command/last-logins.sh
@(,,0550) %%OSSEC_HOME%%/bin/command/open-ports.sh
@dir(,,0550) %%OSSEC_HOME%%/bin/config
@(,,0550) %%OSSEC_HOME%%/bin/config/ossec-conf
@dir(,ossec,0550) %%OSSEC_HOME%%/etc
@sample(,ossec,0640) %%OSSEC_HOME%%/etc/command.conf.sample
@dir(,ossec,0550) %%OSSEC_HOME%%/etc/ossec.conf.d
@(,ossec,0640) %%OSSEC_HOME%%/etc/ossec.conf.d/120.rootcheck.conf
@(,ossec,0640) %%OSSEC_HOME%%/etc/ossec.conf.d/130.syscheck.conf
@(,ossec,0640) %%OSSEC_HOME%%/etc/ossec.conf.d/140.command-output.conf
@(,ossec,0640) %%OSSEC_HOME%%/etc/ossec.conf.d/150.logs.conf
@sample(,ossec,0640) %%OSSEC_HOME%%/etc/ossec.conf.d/900.local.conf.sample
@dir(,ossec,0550) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled
@(,ossec,0640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/520.rootcheck.local.conf
@(,ossec,0640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/530.syscheck.local.conf
@(,ossec,0640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/540.command-output.local.conf
@(,ossec,0640) %%OSSEC_HOME%%/etc/ossec.conf.d/disabled/550.logs.local.conf