Forum: Cfengine Help Subject: Re: I'm exploiting usemodule. There has got to be a better way to define global classes? Author: msvob...@linkedin.com Link to topic: https://cfengine.com/forum/read.php?3,18623,18653#msg-18653
So, maybe the question I should be asking.... Cfengine is an incredibly powerful tool, and its possible to break things very quickly. I'm writing and testing all my policies in a test environment, but I feel like once I unleash a policy into production then I have the ability to see behavior that I wasn't able to simulate in my test area. I'm just trying to limit execution of policies without modifying the policies themselves. If there is a better method of going about this, or someone else has a better solution -- I'm down. Let me know how you've solved this problem, and if its a better solution than what I've hacked together -- super. I'm already going to have to modify all my policies to take advantage of the "restricted" and "unrestricted" global classes. The only other solution I could think of would be to individually point cf-agents at a different master policy server with the updated code. That doesn't scale. Maybe a feature request to build into the product down the line? It seems like this would be a super handy feature that lots of folks would appreciate. _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
