help-cfengine
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Cfengine] cfrun remote script. -f is stripped


From: Bas van der Vlies
Subject: Re: [Cfengine] cfrun remote script. -f is stripped
Date: Wed, 29 Oct 2003 15:59:42 +0100
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20031013 Thunderbird/0.3

To my knowledge this is a security issue and you can never specifiy a file with cfrun. It starts cfagent or a wrapper script. You can parse
the arguments in the wrapper scripts and then start cfagent with right
file. But a better "cfengine" solution is to define a class:

cfagent.conf:
  import:
     !CFAPT::
         normal_run.cf
     CFAPT:
         cfapt.cf

Now on the server:
   cfrun -f cfrun.hosts -- -DCFAPT


Yaroslav Halchenko wrote:

Dear Guru,

I've got the same problem as the guy before but who never got a reply so
I couldn't find answer to my question and decided to bother you

http://mail.gnu.org/archive/html/help-cfengine/2003-08/msg00006.html

The same I have here: I've created a cfengine script which supposed to
run install_packages from FAI any time I add another new package to the
list of packages in FAI configuration to be installed on all machines.
So I don't really want it to be a part of default cfagent.conf but
rather want to run it whenever I want. So I create some script
cfapt.conf which I can run locally as cfagent -f cfapt.conf
and it works.

But if I try to run it from main machine through cfrun I give command like
cfrun -- -f cfapt.conf
then  output shows that either cfrun or cfservd strips out -f and just
calls cfrun ... cfapt.conf
Before I post any long -d2 or -d1 which didn't bring me newbie to the
ground-truth I want to ask you - may be I'm doing something totally wrong
and it shouldn't be done this way at all...

Thank you in advance for all hints

                                  .-.
=------------------------------   /v\  ----------------------------=
Keep in touch                    // \\     (yoh@|www.)onerussian.com
Yaroslav Halchenko              /(   )\               ICQ#: 60653192
                   Linux User    ^^-^^    [175555]
             Key  http://www.onerussian.com/gpg-yoh.asc
GPG fingerprint   3BB6 E124 0643 A615 6F00  6854 8D11 4563 75C0 24C8



_______________________________________________


--
--
********************************************************************
*                                                                  *
*  Bas van der Vlies                     e-mail: basv@sara.nl      *
*  SARA - Academic Computing Services    phone:  +31 20 592 8012   *
*  Kruislaan 415                         fax:    +31 20 6683167    *
*  1098 SJ Amsterdam                                               *
*                                                                  *
********************************************************************





reply via email to

[Prev in Thread] Current Thread [Next in Thread]