-
Type:
Task
-
Status: Open
-
Priority:
Medium
-
Resolution: Unresolved
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
A way to select the path prefix that is used for commands.
body common control { path => { "/usr/bin", "/usr/local/sbin" }; # checked in this order }
The path list should apply to the same promises as the *_returncodes attribute: https://docs.cfengine.com/docs/3.5/reference-promise-types.html#kept_returncodes
bundle agent test { commands: "cmd1"; # would run if in /usr/bin or /usr/local/sbin "/opt/bin/cmd2"; # would only run if in /opt/bin }
- relates to
-
CFE-3426 Extend well known paths (lib/paths.cf) without modifying vendored policy
-
- Done
-
-
CFE-733 execute bundles with least privileges
-
- Open
-
-
CFE-427 user environment for contain in commands bodies
-
- Open
-
-
CFE-1717 Make paths bundle in stdlib more dynamic
-
- Rejected
-
-
CFE-2616 As a policy writer I would like the paths bundle in the stdlib to use POSIX tools when possible
-
- Done
-
-
CFE-2427 Be more resilaint to varying locations of systemctl
-
- Rejected
-