Re: Security of CFINPUTS

[Mark . Burgess]

On 15 May, Julien Brouchier wrote:
> Mark.Burgess@iu.hio.no wrote:
>> 
>> I am planning to make a change in cfengine 2 whereby, if CFINPUTS
>> is not set, cfengine will look for input files in /var/cfengine/inputs.
>> (/var/run/cfengine is deprecated, since some OSes clear /var/run
>> on reboot)
> 
>       I always thought that /var/SOMEPROGNAME is somewhat wrong, Why 
> would'nt you use /var/lib/cfengine ?
> 


This is an eternal discussion, but /var/lib doesn't actually
exist on all systems. On the other hand, one has /var/cron ..
which also...doesn't exist on all systems...
What a mess Unix is. Let's not try to tidy it up ;-)

Mark

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~