It means you are doing a recursive search that changes something, as root.
If you pass through a directory controlled by a non-root user, that user
could potentially redirect your changes to another location by linking, hence
the warning.
Ingersoll, Robert wrote:
> Any ideas?
>
> # cat test.cf
> body common control
> {
> bundlesequence => {"main"};
> }
>
> bundle agent main
> {
> files:
> any::
> "/var/opt/ids/alert\.log\.[0-9]{1,2}"
> transformer => "/bin/compress -f $(this.promiser)";
> }
>
> # cf-agent -KI -f ./test.cf
> Directory /var in search path /var/opt/ids/alert\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Promise (version not specified) belongs to bundle 'main' in file
> './test.cf' near line 18
> Directory /var/opt in search path /var/opt/ids/alert\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Promise (version not specified) belongs to bundle 'main' in file
> './test.cf' near line 18
> Directory /var/opt/ids in search path
> /var/opt/ids/alert\.log\.[0-9]{1,2} is controlled by another user -
> trusting its content is potentially risky (possible race)
> Promise (version not specified) belongs to bundle 'main' in file
> './test.cf' near line 18
> Directory /var in search path /var/opt/ids/alert\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Promise (version not specified) belongs to bundle 'main' in file
> './test.cf' near line 18
> Directory /var/opt in search path /var/opt/ids/alert\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Promise (version not specified) belongs to bundle 'main' in file
> './test.cf' near line 18
> Directory /var/opt/ids in search path
> /var/opt/ids/alert\.log\.[0-9]{1,2} is controlled by another user -
> trusting its content is potentially risky (possible race)
> Promise (version not specified) belongs to bundle 'main' in file
> './test.cf' near line 18
> Directory /var in search path /var/opt/ids/alert\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Promise (version not specified) belongs to bundle 'main' in file
> './test.cf' near line 18
> Directory /var/opt in search path /var/opt/ids/alert\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Promise (version not specified) belongs to bundle 'main' in file
> './test.cf' near line 18
> Directory /var/opt/ids in search path
> /var/opt/ids/alert\.log\.[0-9]{1,2} is controlled by another user -
> trusting its content is potentially risky (possible race)
> Promise (version not specified) belongs to bundle 'main' in file
> './test.cf' near line 18
>
> -----Original Message-----
> From: help-cfengine-boun...@cfengine.org on behalf of Ingersoll, Robert
> Sent: Tue 2/23/2010 4:09 PM
> To: help-cfengine@cfengine.org
> Subject: Directory is controlled by another user - trusting its content
> ispotentially risky (possible race)
>
> What do these messages mean and why am I getting so many of them from
> each run of this promise?
>
> "/var/opt/ids/error\.log\.[0-9]{1,2}"
> transformer => "/bin/compress -f $(this.promiser)";
>
> Directory /var in search path /var/opt/ids/error\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Directory /var/opt in search path /var/opt/ids/error\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Directory /var/opt/ids in search path
> /var/opt/ids/error\.log\.[0-9]{1,2} is controlled by another user -
> trusting its content is potentially risky (possible race)
> Directory /var in search path /var/opt/ids/error\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Directory /var/opt in search path /var/opt/ids/error\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Directory /var/opt/ids in search path
> /var/opt/ids/error\.log\.[0-9]{1,2} is controlled by another user -
> trusting its content is potentially risky (possible race)
> Directory /var in search path /var/opt/ids/error\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Directory /var/opt in search path /var/opt/ids/error\.log\.[0-9]{1,2} is
> controlled by another user - trusting its content is potentially risky
> (possible race)
> Directory /var/opt/ids in search path
> /var/opt/ids/error\.log\.[0-9]{1,2} is controlled by another user -
> trusting its content is potentially risky (possible race)
>
> This is Community 3.0.3 on HP-UX 11.23.
>
> Bob
>
>
>
> The information transmitted is intended only for the person or entity to
> which it is addressed and may contain confidential and/or privileged
> material. Any review, retransmission, dissemination or other use of, or
> taking of any action in reliance upon, this information by person or
> entities other than the intended recipient is prohibited. If you
> received this in error, please contact the sender and delete the
> material from any computer.
> postmas...@stginc.com
> www.stginc.com
>
>
>
> ------------------------------------------------------------------------
>
> The information transmitted is intended only for the person or entity to
> which it is addressed and may contain confidential and/or privileged
> material. Any review, retransmission, dissemination or other use of, or
> taking of any action in reliance upon, this information by person or
> entities other than the intended recipient is prohibited. If you
> received this in error, please contact the sender and delete the
> material from any computer.
>
> postmas...@stginc.com <mailto:postmas...@stginc.com>
> www.stginc.com <http://www.stginc.com>__
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@cfengine.org
> https://cfengine.org/mailman/listinfo/help-cfengine
--
Mark Burgess
-------------------------------------------------
Professor of Network and System Administration
Oslo University College, Norway
Personal Web: http://www.iu.hio.no/~mark
Office Telf : +47 22453272
-------------------------------------------------
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine
