cfenvd droppings in /var/cfengine

[Luke A. Kanies]

Hi all,

I've got one host out of about 10 (in my limited roll-out) whose cfenvd
process appears to be creating many files in /var/cfengine:

kaniela@krypton(0) $ ls /var/cfengine/cf_*
/var/cfengine/cf_incoming.cfengine
/var/cfengine/cf_incoming.cfengine.cfsaved
/var/cfengine/cf_incoming.ftp
/var/cfengine/cf_incoming.ftp.cfsaved
/var/cfengine/cf_incoming.irc
/var/cfengine/cf_incoming.irc.cfsaved
/var/cfengine/cf_incoming.netbiosdgm
/var/cfengine/cf_incoming.netbiosdgm.cfsaved
/var/cfengine/cf_incoming.netbiosns
/var/cfengine/cf_incoming.netbiosns.cfsaved
/var/cfengine/cf_incoming.netbiosssn
/var/cfengine/cf_incoming.netbiosssn.cfsaved
/var/cfengine/cf_incoming.nfsd
/var/cfengine/cf_incoming.nfsd.cfsaved
/var/cfengine/cf_incoming.smtp
/var/cfengine/cf_incoming.smtp.cfsaved
/var/cfengine/cf_incoming.ssh
/var/cfengine/cf_incoming.ssh.cfsaved
/var/cfengine/cf_incoming.telnet
/var/cfengine/cf_incoming.telnet.cfsaved
/var/cfengine/cf_incoming.www
/var/cfengine/cf_incoming.www.cfsaved
/var/cfengine/cf_outgoing.cfengine
/var/cfengine/cf_outgoing.cfengine.cfsaved
/var/cfengine/cf_outgoing.ftp
/var/cfengine/cf_outgoing.ftp.cfsaved
/var/cfengine/cf_outgoing.irc
/var/cfengine/cf_outgoing.irc.cfsaved
/var/cfengine/cf_outgoing.netbiosdgm
/var/cfengine/cf_outgoing.netbiosdgm.cfsaved
/var/cfengine/cf_outgoing.netbiosns
/var/cfengine/cf_outgoing.netbiosns.cfsaved
/var/cfengine/cf_outgoing.netbiosssn
/var/cfengine/cf_outgoing.netbiosssn.cfsaved
/var/cfengine/cf_outgoing.nfsd
/var/cfengine/cf_outgoing.nfsd.cfsaved
/var/cfengine/cf_outgoing.smtp
/var/cfengine/cf_outgoing.smtp.cfsaved
/var/cfengine/cf_outgoing.ssh
/var/cfengine/cf_outgoing.ssh.cfsaved
/var/cfengine/cf_outgoing.telnet
/var/cfengine/cf_outgoing.telnet.cfsaved
/var/cfengine/cf_outgoing.www
/var/cfengine/cf_outgoing.www.cfsaved

I've tried removing them, restarting cfenvd, everything I can think of,
and they come right back.  I also get a syslog message very five minutes
letting me know that they have all been edited.

I have a few other hosts that are configured exactly like this host in all
possible ways (using ISconf), and I'm using the same configs everywhere,
so I don't understand it.

Can anyone enlighten me as to why I'm getting these files, why I'm getting
the syslog messages, and how I can stop it all?

Thanks,
Luke

-- 
If smiling uses so fewer muscles than frowning, how come it
hurts my face so much?