Dear Neil, I would add that "action => warn_only" further qualifies the promise "mode X, ownership Y".
If mode is Z, the promise will be "not kept" on the first pass regardless of the value of "action" attribute -- but setting that value to "warn_only" will prevent CFEngine from keeping (repairing) that promise so it will stay in the state of "not kept, not repaired". In other words, the behavior I see matches my expectations and understanding of CFEngine. However if you think that there is a promise to warn you, then the promise is not kept, I can see the apparent conflict there. However the warning is only an attribute of the files type promise, not a promise in itself. Does that make sense? In other words, it's not a complete reports type promise. It is a "read-only" flag for the system so CFEngine won't make changes. But it's still a "files" type promise, not a "reports" type promise. Yours truly, -at _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine