Content of RPM ossec-hids-2.8.3-4.1.x86_64.rpm :
/etc/init.d/ossec-hids
/etc/logrotate.d/ossec-hids
/lfs/ossec
/lfs/ossec/active-response
/lfs/ossec/active-response/bin
/lfs/ossec/bin
/lfs/ossec/etc
/lfs/ossec/etc/shared
/lfs/ossec/etc/sql
/lfs/ossec/etc/templates
/lfs/ossec/etc/templates/active-response.template
/lfs/ossec/etc/templates/apache-logs.template
/lfs/ossec/etc/templates/ar-disable-account.template
/lfs/ossec/etc/templates/ar-firewall-drop.template
/lfs/ossec/etc/templates/ar-host-deny.template
/lfs/ossec/etc/templates/ar-routenull.template
/lfs/ossec/etc/templates/pgsql-logs.template
/lfs/ossec/etc/templates/rootcheck.template
/lfs/ossec/etc/templates/rules.template
/lfs/ossec/etc/templates/snort-logs.template
/lfs/ossec/etc/templates/syscheck.template
/lfs/ossec/etc/templates/syslog-logs.template
/lfs/ossec/logs
/lfs/ossec/queue
/lfs/ossec/queue/alerts
/lfs/ossec/queue/ossec
/lfs/ossec/queue/rids
/lfs/ossec/queue/syscheck
/lfs/ossec/var
/lfs/ossec/var/run
/usr/sbin/rcossec-hids
/usr/share/doc/packages/ossec-hids
/usr/share/doc/packages/ossec-hids/BUGS
/usr/share/doc/packages/ossec-hids/CONFIG
/usr/share/doc/packages/ossec-hids/INSTALL
/usr/share/doc/packages/ossec-hids/README.md
/var/adm/fillup-templates/sysconfig.ossec-hids