Hi. I'm trying to implement suspiciousnames check as per
http://www.cfengine.org/manuals/cf3-reference.html#suspiciousnames-in-agent
but it ain't going:
[cfengine00 cfengine]# cat ./test_aleksey.cf
body common control
{
bundlesequence => { "report_suspicious_file_names" };
}
body agent control
{
suspiciousnames => { ".mo", "lrk3", "rootkit" };
}
bundle agent report_suspicious_file_names
{
files:
"/root/tmp2"
depth_search = recurse("inf");
}
[cfengine00 cfengine]# cf-agent -IKf ./test_aleksey.cf
cf3:./test_aleksey.cf:8,47: Scalar item in suspiciousnames => { .mo }
in rvalue is out of bounds (value should match pattern List of names
to warn about if found during any file search), near token '}'
cf3:./test_aleksey.cf:8,47: Scalar item in suspiciousnames => { lrk3 }
in rvalue is out of bounds (value should match pattern List of names
to warn about if found during any file search), near token '}'
cf3:./test_aleksey.cf:8,47: Scalar item in suspiciousnames => {
rootkit } in rvalue is out of bounds (value should match pattern List
of names to warn about if found during any file search), near token
'}'
cf3:./test_aleksey.cf:18,14: syntax error, near token '='
cf-agent was not able to get confirmation of promises from
cf-promises, so going to failsafe
[cfengine00 cfengine]#
Please advise?
Best,
Aleksey
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine
