David McGuffey wrote: > Seems to me that any IDS must be tied to the yum update process so that > one is not dealing with hundreds/thousands of changes that were brought > in by a yum update that I choose to apply. > > Is OSSEC any less noisy? > Nope. -Alan