Now comes the twist in this. Rich and I are building a hobbit client for a NON-Linux platform, so whatever code that reads hobbit-clients.cfg and determines the rules, doesn't run on our platform. We have to figure out how to completely mimic the data flow to the server.
So if a linux server has a hobbit-client.cfg that has a file entry for /var/log/special and we only care that the file exists, what does the client-data stream need to contain in the [file:/var/log/special] section that will signal a hobbit server to mark this as a Yellow condition? The size and modification date might be other conditions that people will want to check on our platform.
/Thomas Kern /301-903-2211
-----Original Message----- From: henrik at hswn.dk [mailto:henrik at hswn.dk] Sent: Monday, November 13, 2006 5:29 PM To: hobbit at hswn.dk Subject: Re: [hobbit] File status information in client-data
On Mon, Nov 13, 2006 at 03:44:49PM -0600, Rich Smrcina wrote:
Henrik,
Just to clarify, is this still true for a locally administered client (even Linux)?
On a locally admin'ed client, you have the "hobbit-clients.cfg" file locally. You still need to put a FILE entry into hobbit-clients.cfg to tell Hobbit what rules should be applied to the file you're checking. (Should it exist? Or not? Have a certain size? Be owned by "root"?)