From fabd7cf0f3b64d458c499c4926cb88106b713a11 Mon Sep 17 00:00:00 2001
From: Bob Vincent <pillarsdotnet@gmail.com>
Date: Tue, 21 Aug 2018 12:58:29 -0400
Subject: [PATCH] Make rootcheck and syscheck optional.

---
 .../templates/var-ossec-etc-ossec-agent.conf.j2               | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 b/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
index a5047bdb..8dc802c1 100644
--- a/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
+++ b/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
@@ -39,6 +39,7 @@
     <disabled>no</disabled>
   </active-response>
 
+  {% if wazuh_agent_config.rootcheck is defined %}
   <rootcheck>
     <disabled>no</disabled>
     <check_unixaudit>yes</check_unixaudit>
@@ -71,7 +72,9 @@
 
     <skip_nfs>yes</skip_nfs>
   </rootcheck>
+  {% endif %}
 
+  {% if wazuh_agent_config.syscheck is defined %}
   <syscheck>
     <disabled>no</disabled>
     {% if ansible_os_family == "Windows" %}
@@ -117,6 +120,7 @@
     {% endfor %}
     {% endif %}
   </syscheck>
+  {% endif %}
 
   {% if ansible_system == "Linux" and wazuh_agent_config.openscap.disable == 'no' %}
   <wodle name="open-scap">