1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
|
############################################################################
# Copyright (C) CFEngine AS
#
# This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License LGPL as published by the
# Free Software Foundation; version 3.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# To the extent this program is licensed as part of the Enterprise
# versions of CFEngine, the applicable Commercial Open Source License
# (COSL) may apply to this file if you as a licensee so wish it. See
# included file COSL.txt.
###########################################################################
#
# CFEngine Community Open Promise-Body Library
#
# This initiative started by CFEngine promotes a
# standardized set of names and promise specifications
# for template functionality within CFEngine 3.
#
# The aim is to promote an industry standard for
# naming of configuration patterns, leading to a
# de facto middleware of standardized syntax.
#
# Names should be intuitive and parameters should be
# minimal to assist readability and comprehensibility.
# Contributions to this file are voluntarily given to
# the cfengine community, and are moderated by CFEngine.
# No liability or warranty for misuse is implied.
#
# If you add to this file, please try to make the
# contributions "self-documenting". Comments made
# after the bundle/body statement are retained in
# the online docs
#
# For CFEngine Core: 3.5.1 to 3.5.x
# Commands bodies
###################################################
# If you find CFEngine useful, please consider #
# purchasing a commercial version of the software.#
###################################################
bundle agent daemonize(command)
# @brief Run a command as a daemon. I.e., fully detaches from Cfengine.
# @param command The command to run detached
# Note: There will be no output from the command reported by cf-agent. This
# bundle has no effect on windows
#
# **Example:**
# ```cf3
# methods:
# "Launch Daemon"
# usebundle => daemonize("/bin/sleep 30");
# ```
{
commands:
!windows::
"exec 1>&-; exec 2>&-; $(command) &"
contain => in_shell;
reports:
windows.(inform_mode|verbose_mode)::
"$(this.bundle): This bundle does not support Windows";
}
##-------------------------------------------------------
## contain
##-------------------------------------------------------
body contain silent
{
no_output => "true";
}
##
body contain in_dir(s)
{
chdir => "$(s)";
}
##
body contain in_dir_shell(s)
{
chdir => "$(s)";
useshell => "true"; # canonical "useshell" but this is backwards-compatible
}
##
body contain silent_in_dir(s)
{
chdir => "$(s)";
no_output => "true";
}
##
body contain in_shell
{
useshell => "true"; # canonical "useshell" but this is backwards-compatible
}
##
body contain in_shell_bg
{
useshell => "true"; # canonical "useshell" but this is backwards-compatible
}
##
body contain in_shell_and_silent
{
useshell => "true"; # canonical "useshell" but this is backwards-compatible
no_output => "true";
}
##
body contain in_dir_shell_and_silent(dir)
{
useshell => "true"; # canonical "useshell" but this is backwards-compatible
no_output => "true";
chdir => "$(dir)";
}
##
body contain setuid(x)
{
exec_owner => "$(x)";
useshell => "false"; # canonical "noshell" but this is backwards-compatible
}
##
body contain setuid_sh(x)
{
exec_owner => "$(x)";
useshell => "true"; # canonical "useshell" but this is backwards-compatible
}
##
body contain setuidgid_sh(owner,group)
{
exec_owner => "$(owner)";
exec_group => "$(group)";
useshell => "true"; # canonical "useshell" but this is backwards-compatible
}
##
body contain jail(owner,root,dir)
{
exec_owner => "$(owner)";
useshell => "true"; # canonical "useshell" but this is backwards-compatible
chdir => "$(dir)";
chroot => "$(root)";
}
##
body contain setuid_umask(uid, umask)
###################################################
# | Files | Directories #
###################################################
# Umask | Octal Symbolic | Octal Symbolic #
########+#####################+###################+
# 000 | 666 (rw-rw-rw-) | 777 (rwxrwxrwx)
# 002 | 664 (rw-rw-r--) | 775 (rwxrwxr-x)
# 022 | 644 (rw-r--r--) | 755 (rwxr-xr-x)
# 027 | 640 (rw-r-----) | 750 (rwxr-x---)
# 077 | 600 (rw-------) | 700 (rwx------)
# 277 | 400 (r--------) | 500 (r-x------)
{
exec_owner => "$(uid)";
umask => "$(umask)";
}
|
