Re: cfexecd and chmod($input_dir)

[Brendan Strejcek]

You are given the power (with update.conf and copy: actions) to put
files wherever you want with whatever permissions you want. So create a
mirror in /var/cf or whatever with the permissions of your dreams.

My suggestion would be to make cfagent noisy when it changes the
permissions of objects to maintain its idea of "trusted". This should
not be annoying (if cfagent is constantly changing these permissions,
you have issues and deserve to be annoyed) and it would probably help
people who are trying to figure out why a chmod of /var/cfengine does
not stick.