Re: warn when killing blacklisted processes

[Russell Adams]

I think this is close to what you want.

processes:

  linux::

    "psybnc" signal=kill define=KilledPsybnc

alerts:

  KilledPsybnc::

    "I have valiantly slain a process in your honor."

  !KilledPsybnc::

    "I'm the Black Process! I'm INVINCIBLE!"

Russell

On Thu, Aug 26, 2004 at 06:35:33PM +0200, Mike Gabriel wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> hi there,
> 
> another question:
> 
> is it possible to send a mail-warning if a processed gets killed by cfengine?
> 
> the cf_code is:
> 
> <snip>
> # cf.process_blacklist
> 
> #
> # POLICY for cf.process_blacklist
> #
> #   o kill any of the following processes if detected on the system
> #
> 
> control:
> 
>   actionsequence = ( processes )
> 
> processes:
> 
>   linux::
> 
>     "psybnc" signal=kill
> 
> </snip>
> 
> whenever psybnc is started, i want it killed and i want cfengine to tell 
> me... 
> any clues?
> 
> thanks a lot!!!
> mike
> 
> - -- 
> 
> network administration, ecology centre, kiel university, germany
> Mike Gabriel, olshausenstr 75, 24118 kiel, germany
> 
> fon-work: +49 431 880-1186
> fon-home: +49 431 6474196
> mail: mgabriel@ecology.uni-kiel.de
> www: http://www.ecology.uni-kiel.de, http://zope.ecology.uni-kiel.de
>      
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
> 
> iD8DBQFBLhFVpoJgRMI6HfERAoxVAJ9a5+rXuwT7iZygWw6+YuHWg9bZtgCfWNal
> togFamU6+LqbGkchFmLgmFY=
> =0Lzu
> -----END PGP SIGNATURE-----
> 
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://lists.gnu.org/mailman/listinfo/help-cfengine