Re: filter to check for PPID=1

[Mark Burgess]

On 24 Oct, Daniel Nilsson wrote:
> 
> 
> I'm running 2.0.4 and want to check for sshd process with PPID=1, but
> cfengine doesnt like that... has anyone got it to work? I know that I
> cant signal process 1-3, but this is the PPID. Help?
> 
> -----
> 
> 
> filters:
> 
> { sshd_parent
> 
> Owner: "root"
> PPID: "1"
> 
> Result: "Owner.PPID"
> }
> 
> processes:
> 
> "sshd" filter=sshd_parent action=warn

This was caused by a bug in the shrink wrapping that eliminates spaces
from regular expressions matches, Thanks for pointing this out. It is
now fixed in the sources and hence in 2.0.5 (to appear soon)

M


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~