[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Security of CFINPUTS
From: |
Mark . Burgess |
Subject: |
Security of CFINPUTS |
Date: |
Tue, 15 May 2001 10:35:58 +0200 (MET DST) |
I am planning to make a change in cfengine 2 whereby, if CFINPUTS
is not set, cfengine will look for input files in /var/cfengine/inputs.
(/var/run/cfengine is deprecated, since some OSes clear /var/run
on reboot)
Since cfengine checks the permissions and ownership of files before
accepting (and will additionally authenticate them cryptographically in
future), this seems like a reasonable feature, which could simplify
setup.
Does anyone have any arguments against this?
Mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272 Email: address@hidden
Fax : +47 22453205 WWW : http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Security of CFINPUTS,
Mark . Burgess <=