# cfagent.conf
# written by Warren Wright

control:

   actionsequence = ( files directories tidy disable editfiles processes )

   domain         = ( allegheny.edu )
   timezone       = ( EDT EST )
   schedule = ( Min00_05 Min30_35 )

files:

   /etc/passwd 

         mode=644        # make sure the file permissions are right
         owner=root      # make sure it's owned by root
         action=fixall   # if anything is wrong, fix it immediately!
         checksum=md5    # keep a "tripwire" checksum to tell us
                         # if any changes occur here

   /etc/shadow mode=600 owner=root action=fixall
   /etc/group mode=644 owner=root action=fixall

directories:
   /tmp mode=1777 owner=root group=root


tidy:
   /tmp recurse=inf age=14 rmdirs=sub


disable:
   /root/.rhosts
   /etc/hosts.equiv
editfiles:
{ /etc/crontab
	AppendIfNoSuchLine "0 * * * * root /var/cfengine/bin/cfexecd -F"
}


processes:
	"inetd" signal=hup
	"cfexecd" restart "/var/cfengine/bin/cfexecd"
	"cfservd" restart "/var/cfengine/bin/cfservd"