var/ossec /var/
debian/etc /
