Anyone? =( The only other solution I can think of, and this is dumb, would be to insert this into root's crontab.
0,15,30,45 * * * /var/cfengine/bin/cf-agent -b lay_etc_tripwire_detection I really don't want to do that, because cf-execd is firing splaytime, and clients could have multiple instances of cf-agent running simultaneously. On 4/20/11 11:50 AM, "no-re...@cfengine.com" <no-re...@cfengine.com> wrote: > Forum: Cfengine Help > Subject: Re: laying a tripwire and firing the checksum_alerts class > Author: msvob...@linkedin.com > Link to topic: https://cfengine.com/forum/read.php?3,21544,21546#msg-21546 > > Great suggestion, but it didn't work. =( > > > $ grep background lay_etc_tripwire_detection.cf > > $ echo blah >> /etc/mike > > $ /var/cfengine/bin/cf-agent -I -K -b lay_etc_tripwire_detection >>> Using command line specified bundlesequence > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > ALERT: Hash (md5) for /etc/mike changed! > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > -> Updating hash for /etc/mike to MD5=7c28d5494f5d030ab701303bdc203393 > I: Report relates to a promise with handle "tripwire_on_etc" > I: Made in version '1.3.4' of > '/var/cfengine/inputs/lay_etc_tripwire_detection.cf' near line 14 > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > ALERT: Last modified time for /etc/mike changed Wed Apr 20 08:20:50 2011 -> > Wed Apr 20 08:49:04 2011 > > > No report printed... > > $ /var/cfengine/bin/cf-agent -I -K -b lay_etc_tripwire_detection >>> Using command line specified bundlesequence > R: cf3: The tripwire on esv4-be24.stg:/etc has been tripped. > > > The persistent class takes effect. > > > _______________________________________________ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
