Cfengine Help: Re: Successful 3.1.4 build on HP-UX 11.11

2011-05-12 Thread no-reply
Forum: Cfengine Help Subject: Re: Successful 3.1.4 build on HP-UX 11.11 Author: davidlee Link to topic: https://cfengine.com/forum/read.php?3,21894,21913#msg-21913 You say: > Ran into another hitch in 3.1.5 - a dependency on unsetenv(), which is also > included in the Portability Package. I just

Re: Cfengine Help: Re: Successful 3.1.4 build on HP-UX 11.11

2011-05-12 Thread Mikhail Gusarov
On 05/11/2011 06:10 PM, no-re...@cfengine.com wrote: > Looks like the proper way to handle the setlinebuf() issue for HP-UX with > autoconf is this, from the 3.1.5 source: Thank you. Slightly different solution (using AC_REPLACE_FUNC) is implemented in r2307, could you try it? __

Re: Cfengine Help: Re: Successful 3.1.4 build on HP-UX 11.11

2011-05-12 Thread Mikhail Gusarov
On 05/11/2011 06:52 PM, no-re...@cfengine.com wrote: > Ran into another hitch in 3.1.5 - a dependency on unsetenv(), which is also > included in the Portability Package. I just changed pub/unsetenv.c where it > said: > > #ifdef __sun > > ... to ... > > #if defined(__sun) || defined(__hpux) >

Re: Cfengine Help: Re: Successful 3.1.4 build on HP-UX 11.11

2011-05-12 Thread Mikhail Gusarov
On 05/12/2011 12:30 PM, no-re...@cfengine.com wrote: >> Ran into another hitch in 3.1.5 - a dependency on unsetenv(), which is also >> included in the Portability Package. I just changed pub/unsetenv.c where it >> said: >> >> #ifdef __sun >> >> ... to ... >> >> #if defined(__sun) || defined(__hpu

Cfengine Help: file_select in std lib and anonymous list

2011-05-12 Thread no-reply
Forum: Cfengine Help Subject: file_select in std lib and anonymous list Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,21917,21917#msg-21917 Consider this from the std lib body file_select by_name(names) { leaf_name => { @(names)}; file_result => "leaf_name"; } 'names'

Re: Cfengine Help: file_select in std lib and anonymous list

2011-05-12 Thread Jerome Baum
On Thu, May 12, 2011 at 15:51, wrote: > 'names' has to be a list. Is there anyway to pass an anonymous list stead? > For example > # normal way > file_select => by_name( "@{pca_etc_files}"), > > # anonymous way > file_select => by_name( { "patch.*", "pca.*" } ), > What's the use case? i.e. do

Cfengine Help: Re: Cfengine Help: file_select in std lib and anonymous list

2011-05-12 Thread no-reply
Forum: Cfengine Help Subject: Re: Cfengine Help: file_select in std lib and anonymous list Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,21918,21919#msg-21919 Why define a variable that will only be used once? ___ Help-cfengin

Cfengine Help: Re: Cfengine Help: file_select in std lib and anonymous list

2011-05-12 Thread no-reply
Forum: Cfengine Help Subject: Re: Cfengine Help: file_select in std lib and anonymous list Author: jeromebaum Link to topic: https://cfengine.com/forum/read.php?3,21918,21920#msg-21920 The name is a kind of documentation. Plus, it's less work than finding out how to use an anonymous list, apparen

Cfengine Help: 3.1.5 Master policy server issues

2011-05-12 Thread no-reply
Forum: Cfengine Help Subject: 3.1.5 Master policy server issues Author: msvob...@linkedin.com Link to topic: https://cfengine.com/forum/read.php?3,21921,21921#msg-21921 I've upgraded two of my master policy servers from 3.1.4 to 3.1.5. The upgrade worked, but I'm starting to see some strange beh

Re: Cfengine Help: defining inline bodies

2011-05-12 Thread Ted Zlatanov
On Tue, 10 May 2011 00:00:06 +0200 (CEST) no-re...@cfengine.com wrote: n> Is it possible to define a compound body inline? I'd like to do something like n> commands: n> "$(command)" n> contain => { useshell => "false"; umask => "002"; }; n> but I'm not seeing an obvious way to do that.

Cfengine Help: Maintaining a Nagios config file

2011-05-12 Thread no-reply
Forum: Cfengine Help Subject: Maintaining a Nagios config file Author: daveseff Link to topic: https://cfengine.com/forum/read.php?3,21923,21923#msg-21923 Hello, I would like to know if it is possible to manage host entries in a nagios config file? Each host entry looks like this: define host

Re: Cfengine Help: Re: Cfengine Help: file_select in std lib and anonymous list

2011-05-12 Thread Jesse Becker
On Thu, May 12, 2011 at 11:00:32AM -0400, no-re...@cfengine.com wrote: >Forum: Cfengine Help >Subject: Re: Cfengine Help: file_select in std lib and anonymous list >Author: neilhwatson >Link to topic: https://cfengine.com/forum/read.php?3,21918,21919#msg-21919 > >Why define a variable that will onl

suspiciousnames implemented in 3.1.5b1 - more detail, please?

2011-05-12 Thread Aleksey Tsalolikhin
Hi. ChangeLog in the 3.1.5 source tar ball says "suspiciousnames implemented". Is it possible to get more detail, please? I'm curious if this change relates to https://cfengine.com/bugtracker/view.php?id=464 Thanks, -at ___ Help-cfengine mailing list H

change detection - md5 / sha1 databases? why both?

2011-05-12 Thread Aleksey Tsalolikhin
Is it just me, or did Cfengine 3 used to use md5 databases for change detection? now I see both md5 and sha1 are used. why is that? (doesn't that double the cost of change detection?) bundle agent example { files: "/etc" changes => detect_all_change, depth_search => recurse("inf

Re: change detection - md5 / sha1 databases? why both?

2011-05-12 Thread Eystein Måløy Stenberg
Hi Aleksey, You are right. If you look in cfengine_stdlib.cf, you would see --- body changes detect_all_change # This is fierce, and will cost disk cycles { hash => "best"; report_changes => "all"; update_hashes => "yes"; } --- Consider using the detect_content body for a cheaper bu

how to use process_select?

2011-05-12 Thread Aleksey Tsalolikhin
So I'm looking for a practical example of how process_select could be used. What do you do after the selection has been made? How do you report the process names or take actions (signal or process_stop them?) For example, I have this policy that will match on suspicious process names, but then w

Re: change detection - md5 / sha1 databases? why both?

2011-05-12 Thread Aleksey Tsalolikhin
Interesting. What does "best" mean in this context? (How does "best" translate to MD5 and SHA1? Is that on purpose?) Why not just use SHA1? (i'm not criticizing, just want to understand.) Thank you for the tip re detect_content body. Aleksey On Thu, May 12, 2011 at 10:05 PM, Eystein Måløy

Re: change detection - md5 / sha1 databases? why both?

2011-05-12 Thread Eystein Måløy Stenberg
Hi, See the reference manual at http://www.cfengine.org/manuals/cf3-reference.html#changes-in-files for a detailed description. "The best option cross correlates the best two available algorithms known in the OpenSSL library. " You can also just pick sha1 (or the other sha's) if you like. --Eys

Re: how to use process_select?

2011-05-12 Thread Seva Gluschenko
Aleksey, your question is pretty well covered here: http://www.cfengine.org/manuals/cf3-reference.html#processes-in-agent-promises say, if you want to terminate suspicious process, just kill it: ".*" process_select => proc_finder("$(suspicious_process_names)"), signals => {