Hey, Hope you are sleeping well. Have verified it works on my end now.
--Eystein On Tue, Feb 1, 2011 at 9:12 AM, Aleksey Tsalolikhin <atsaloli.t...@gmail.com> wrote: > On Mon, Jan 31, 2011 at 11:53 PM, Eystein Måløy Stenberg > <eystein.stenb...@gmail.com> wrote: >> The validation of suspiciousnames was too strict, can you retry svn trunk? > > Dear Eystein, > > Thanks! I retried svn trunk, but still no go: > > community>:/root/core/src/aleksey_test.cf:9,47: Scalar item in > suspiciousnames => { .mo } in rvalue is out of bounds (value should > match pattern List of names to warn about if found during any file > search), near token '}' > community>:/root/core/src/aleksey_test.cf:9,47: Scalar item in > suspiciousnames => { lrk3 } in rvalue is out of bounds (value should > match pattern List of names to warn about if found during any file > search), near token '}' > community>:/root/core/src/aleksey_test.cf:9,47: Scalar item in > suspiciousnames => { rootkit } in rvalue is out of bounds (value > should match pattern List of names to warn about if found during any > file search), near token '}' > > > Could you please test your next fix using my policy below? (I'm about > to go to sleep. May I leave this in your hands, please? :) > > --- start of policy file --- > body common control > { > bundlesequence => { "report_suspicious_file_names" }; > inputs => { "cfengine_stdlib.cf" }; > } > > body agent control > { > suspiciousnames => { ".mo", "lrk3", "rootkit" }; > } > > bundle agent report_suspicious_file_names > { > > files: > > "/root/tmp2" > > depth_search => recurse("inf"); > } > --- end of policy file --- > > Thank you so much! > > Aleksey > _______________________________________________ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine