On Tue, Apr 3, 2012 at 8:51 AM, Nick Anderson <n...@cmdln.org> wrote:
>
> I prefer to express each line as an individual promise so that I can
> have a comment in the policy about why that access rule was inserted,
> but I am having trouble thinking of a way to do that and preserve order.

It might be useful to put that comment into the line itself so you can also
see it from the command line when logged into the server.

I do something similar with my iptables config file, insert the comments
as iptables comments (using the comment module) so that the comments
show up in the "iptables --list" output.

e.g. {{{  insert_lines:

"line 1 # comment

line 2 # comment2"

  insert_type => "preserve_block";
}}}

This way you'd have the line ordering AND the comments, but not as
CFEngine comments, unfortunately.

Best,
-at
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to