Well, a simple hack would be to create a file with a list of all the files managed by cfengine (e.g. /etc/cfengine_files). It would be somewhat of a pain to make sure your cfengine rules always add to this file, or that you properly keep it updated, but it would work.
-Bryan On Mon, 1 Feb 2010, Justin Lloyd wrote: > Date: Mon, 1 Feb 2010 12:42:42 -0700 > From: Justin Lloyd <jll...@digitalglobe.com> > To: nwat...@symcor.com > Cc: help-cfengine@cfengine.org, help-cfengine-boun...@cfengine.org > Subject: RE: Team-based Cfengine Management > > Neil, > > Absolutely, that's my primary focus. The hard part is for everyone to always > know (or easily find out) what's under Cfengine control for those emergency > moments when the change control process gets "overlooked" and manual changes > are made. Ideally, that wouldn't happen. Realistically... > > Thanks, > Justin > > > -----Original Message----- > From: nwat...@symcor.com [mailto:nwat...@symcor.com] > Sent: Monday, February 01, 2010 12:08 PM > To: Justin Lloyd > Cc: help-cfengine@cfengine.org; help-cfengine-boun...@cfengine.org > Subject: Re: Team-based Cfengine Management > > I've found that this is often an education process. Folks need to be > aware that Cfengine is the authority for certain services and files. Once > I had to combine a Cfengine deployment with a hostmaster who maintained > DNS records through Bind. I wrote a Cfengine policy to watch over Bind > files and keep the service up. I then checked the Bind files into a > Subversion repository. The hostmaster could make his Bind edits check > them into the Subversion. Cfengine would pick up the changes and > production hosts would get them. > > Sincerely, > -- > Neil Watson > 416-673-3465 > > This electronic communication and any attachments may contain confidential > and proprietary > information of DigitalGlobe, Inc. If you are not the intended recipient, or > an agent or employee > responsible for delivering this communication to the intended recipient, or > if you have received > this communication in error, please do not print, copy, retransmit, > disseminate or > otherwise use the information. Please indicate to the sender that you have > received this > communication in error, and delete the copy you received. DigitalGlobe > reserves the > right to monitor any electronic communication sent or received by its > employees, agents > or representatives. > > _______________________________________________ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine