On Mon, Jan 31, 2011 at 11:53 PM, Eystein Måløy Stenberg
<eystein.stenb...@gmail.com> wrote:
> The validation of suspiciousnames was too strict, can you retry svn trunk?
Dear Eystein,
Thanks! I retried svn trunk, but still no go:
community>:/root/core/src/aleksey_test.cf:9,47: Scalar item in
suspiciousnames => { .mo } in rvalue is out of bounds (value should
match pattern List of names to warn about if found during any file
search), near token '}'
community>:/root/core/src/aleksey_test.cf:9,47: Scalar item in
suspiciousnames => { lrk3 } in rvalue is out of bounds (value should
match pattern List of names to warn about if found during any file
search), near token '}'
community>:/root/core/src/aleksey_test.cf:9,47: Scalar item in
suspiciousnames => { rootkit } in rvalue is out of bounds (value
should match pattern List of names to warn about if found during any
file search), near token '}'
Could you please test your next fix using my policy below? (I'm about
to go to sleep. May I leave this in your hands, please? :)
--- start of policy file ---
body common control
{
bundlesequence => { "report_suspicious_file_names" };
inputs => { "cfengine_stdlib.cf" };
}
body agent control
{
suspiciousnames => { ".mo", "lrk3", "rootkit" };
}
bundle agent report_suspicious_file_names
{
files:
"/root/tmp2"
depth_search => recurse("inf");
}
--- end of policy file ---
Thank you so much!
Aleksey
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine
