Security of CFINPUTS

[Mark . Burgess]

I am planning to make a change in cfengine 2 whereby, if CFINPUTS
is not set, cfengine will look for input files in /var/cfengine/inputs.
(/var/run/cfengine is deprecated, since some OSes clear /var/run
on reboot)

Since cfengine checks the permissions and ownership of files before
accepting (and will additionally authenticate them cryptographically in
future), this seems like a reasonable feature, which could simplify
setup.

Does anyone have any arguments against this?

Mark

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~