Forum: Cfengine Help Subject: Community 3.1.4 and execresult. Author: berntjernberg Link to topic: https://cfengine.com/forum/read.php?3,20576,20576#msg-20576
Hi all, I'm creating a bundle to get certificate for a monitoring agent (not Cfengine). I'm using execresult to gather some info. After scripts, supplied by the "monitoring agent vendor", has been run the permission on the binaries are 750. cf-agent (as root) complains about the binaries not being executable. Running those commands manually as root works as expected. Shouldn't Cfengine allow this as long as cf-agent is run as root? community> execresult "/opt/OV/bin/ovcoreid" is assumed to be executable but isn't community> execresult "/opt/OV/bin/ovcoreid" is assumed to be executable but isn't community> execresult "/opt/OV/bin/ovcoreid" is assumed to be executable but isn't community> execresult "/opt/OV/bin/ovcert -list" is assumed to be executable but isn't community> execresult "/opt/OV/bin/ovcert -list" is assumed to be executable but isn't community> execresult "/opt/OV/bin/ovcert -list" is assumed to be executable but isn't # ls -l /opt/OV/bin/ovcr* -rwxr-x--- 1 agentusr agentgrp 159728 Oct 8 21:40 /opt/OV/bin/ovcert -rwxr-x--- 1 agentusr agentgrp 40220 Oct 8 19:04 /opt/OV/bin/ovcoreid I can run it as /usr/bin/su - agentusr -c "/opt/OV/bin/ovcert -list" but that is yet another external command involved. _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine