In message <[email protected]>,
[email protected] writes:
>I have a use where sec is watching a datastream and adding/removing user 
>permissions from a file based on events that it sees.
>
>However, since I don't know the state of the permissions when I startup, I 
>need to clear out pending permissions at startup time.
>
>I could do this with a script external to SEC, but it would be nice if I 
>could do this from within SEC, but I'm not seeing a way to do this in the 
>documentation.

Would starting sec with -intevents and a rule like:

  type=single
  ptype=regexp
  pattern=^SEC_STARTUP$
  context=SEC_INTERNAL_EVENT
  action = shellcmd sh commands to reset permissions.

that fires only on SEC startup do the trick?

--
                                -- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.

------------------------------------------------------------------------------

_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to