#
# /var/lib/cfengine2/masterfiles/input/cfagent.conf
#
#  This is the master file of rules, and will be applied to all
# hosts we manage.
#

control:
  domain = ( my.flat )
  access = ( root skx )
  cfrunCommand = ( "/usr/sbin/cfagent" )
  actionsequence = ( files directories tidy resolve )
  maxage = ( 7 )


#
# Fix some basic file permissions.
#
files:
  /etc/sudoers mode=440 owner=root group=root   action=fixall
  /etc/passwd mode=644  owner=root group=root   action=fixall
  /etc/shadow mode=640  owner=root group=shadow action=fixall
  /etc/gshadow mode=640  owner=root group=shadow action=fixall


#
# Clean out *ALL* files older than $(maxage) days from /tmp.
#
# Clean out files older than $(maxage) which match the pattern *~
# inside user home directories.
#
tidy:
  /tmp pattern=* age=$(maxage) recurse=inf
  /home pattern=*~ age=$(maxage) recurse=inf

directories:
  /tmp mode=1777 owner=root group=root


resolve:
	"search my.flat"
	192.168.1.1
        "# Edit with cfengine"