From f88cbb2780754a054fbb0e21d7edd60a2c4998d0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gonzalo=20Acu=C3=B1a?= <teddytpc1@gmail.com>
Date: Mon, 14 Mar 2022 15:15:07 -0300
Subject: [PATCH] Rootcheck if updated

---
 .../templates/var-ossec-etc-shared-agent.conf.j2                | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/wazuh/ansible-wazuh-manager/templates/var-ossec-etc-shared-agent.conf.j2 b/roles/wazuh/ansible-wazuh-manager/templates/var-ossec-etc-shared-agent.conf.j2
index 6f46fed9..0de65c57 100644
--- a/roles/wazuh/ansible-wazuh-manager/templates/var-ossec-etc-shared-agent.conf.j2
+++ b/roles/wazuh/ansible-wazuh-manager/templates/var-ossec-etc-shared-agent.conf.j2
@@ -93,7 +93,7 @@
     <!-- Frequency that rootcheck is executed - every 12 hours -->
     <frequency>{{ agent_config.rootcheck.frequency }}</frequency>
 
-    {% if agent_config.rootcheck.cis_distribution_filename is defined %}
+    {% if agent_config.rootcheck.cis_distribution_filename is defined and agent_config.rootcheck.cis_distribution_filename is not null %}
     <system_audit>{{ wazuh_dir }}/etc/shared/default/{{ agent_config.rootcheck.cis_distribution_filename }}</system_audit>
     {% endif %}
     <skip_nfs>yes</skip_nfs>