Closed cfm closed 3 months ago
Our documentation on OSSEC instructs administrators to configure OSSEC via securedrop-admin sdconfig just like everything else.
securedrop-admin sdconfig
https://github.com/freedomofpress/securedrop-docs/blob/24d35119423703957e4864fe05ad056221d1fbe3/docs/admin/maintenance/ossec_alerts.rst?plain=1#L20-L23
This has the risk of confusing administrators, e.g. that OSSEC is optional if they don't go out of their way to edit site-specific manually.
site-specific
Expected behavior
Our documentation on OSSEC instructs administrators to configure OSSEC via
securedrop-admin sdconfig
just like everything else.Actual behavior
https://github.com/freedomofpress/securedrop-docs/blob/24d35119423703957e4864fe05ad056221d1fbe3/docs/admin/maintenance/ossec_alerts.rst?plain=1#L20-L23
Steps to reproduce the problem
Additional information
This has the risk of confusing administrators, e.g. that OSSEC is optional if they don't go out of their way to edit
site-specific
manually.