Forum: Cfengine Help
Subject: Non-root and workdir again :-)
Author: berntjernberg
Link to topic: https://cfengine.com/forum/read.php?3,21249,21249#msg-21249
Hi,
Why not move all files created directly under workdir to sub directories of
workdir instead?
All pid-files in workdir/pidfiles, lo
Forum: Cfengine Help
Subject: Re: Non-root and workdir again :-)
Author: mark
Link to topic: https://cfengine.com/forum/read.php?3,21249,21250#msg-21250
This is an interesting idea but it has non-trivial security implications. You
would have to create that directory by root, with the user own
Forum: Cfengine Help
Subject: Re: Non-root and workdir again :-)
Author: berntjernberg
Link to topic: https://cfengine.com/forum/read.php?3,21249,21251#msg-21251
Hi,
This is how I will do it with the ~/.cfagent design still there. If this is
doable with a
root:cfengine:750 permission on /var
