Forum: Cfengine Help
Subject: Community 3.1.4 and execresult.
Author: berntjernberg
Link to topic: https://cfengine.com/forum/read.php?3,20576,20576#msg-20576

Hi all,

I'm creating a bundle to get certificate for a monitoring agent (not Cfengine). 
I'm using
execresult to gather some info. After scripts, supplied by the "monitoring 
agent vendor",
has been run the permission on the binaries are 750. cf-agent (as root) 
complains about
the binaries not being executable. Running those commands manually as root works
as expected. Shouldn't Cfengine allow this as long as cf-agent is run as root?



community> execresult "/opt/OV/bin/ovcoreid" is assumed to be executable but 
isn't
community> execresult "/opt/OV/bin/ovcoreid" is assumed to be executable but 
isn't
community> execresult "/opt/OV/bin/ovcoreid" is assumed to be executable but 
isn't
community> execresult "/opt/OV/bin/ovcert -list" is assumed to be executable 
but isn't
community> execresult "/opt/OV/bin/ovcert -list" is assumed to be executable 
but isn't
community> execresult "/opt/OV/bin/ovcert -list" is assumed to be executable 
but isn't

# ls -l /opt/OV/bin/ovcr*
-rwxr-x---   1 agentusr   agentgrp    159728 Oct  8 21:40 /opt/OV/bin/ovcert
-rwxr-x---   1 agentusr   agentgrp     40220 Oct  8 19:04 /opt/OV/bin/ovcoreid



I can run it as



/usr/bin/su - agentusr -c "/opt/OV/bin/ovcert -list"



but that is yet another external command involved.

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to