pattern matching question

[Bob Smith]

i have the following rule in the files class:
       /
               recurse=1
               checksum=sha
               exclude=*.old
               exclude=*.orig
               exclude=*-
               include=.Xauthority
               include=.bash*
               include=.csh*
               include=.k5login
               include=.k5users
               include=.ksh*
               include=.login*
               include=.logout*
               include=.profile*
               include=.rhosts
               include=.shosts
               include=.ssh/authorized_keys
               include=.tcsh*
               include=.zlogin*
               include=.zlogout*
               include=.zprofile*
               include=.zsh*

which seems to properly catch /.cshrc and /.Xauthority, but misses /.profile 
and /.ssh/authorized_keys. i haven't seen anything in the documentation 
stating whether cfengine is using glob or regex pattern matching. i've tried 
changing 'recurse' to '2' but that didn't seem to matter. i've also tried 
changing '.profile*' to both '.profile.*' and '\.profile.*'.




i have the rule:
       /usr
               recurse=inf
               checksum=sha
               exclude=*/doc/*
               exclude=*/docs/*
               exclude=*/include/*
               exclude=*/man/*
               exclude=iplanet/*
               exclude=src/*
               exclude=*.h

which incorrectly catches /usr/j2se/man/* and /usr/local/man/* and 
/usr/local/docs/* and /usr/iplanet/* and /usr/include/* etc.




i have the rule:
       /etc
               recurse=inf
               checksum=sha
               exclude=,*
               exclude=*.new
               exclude=*.old
               exclude=*.orig
               exclude=*-
               exclude=cron.d/FIFO
               exclude=inet/ntp.client
               exclude=inet/ntp.server
               exclude=mail/subsidiary.cf
               exclude=mail/submit.cf
               exclude=mail/main.cf
               exclude=mnttab
               exclude=saf/.
               exclude=nsswitch.*
               exclude=lvm/lock
               exclude=lvm/.mdmonitord.lock
               exclude=.pwd.lock

which incorrectly catches inet/ntp.client and inet/ntp.server though it 
correctly misses cron.d/FIFO. it also incorrectly catches /etc/saf/*.

_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar – get it now! 
http://toolbar.msn.com/go/onm00200415ave/direct/01/