229Appendix B. Command Line ConfigManagement ToolsIn addition to the options provided in the RHN website, Red Hat Network offers two command linetools for managing a system's configuration files: the Red Hat Network Configuration Client and theRed Hat Network Configuration Manager. There is a complementary Red Hat Network ActionsControl tool that is used to enable and disable configuration management on client systems. If you donot yet have these these tools installed, they can be found within the RHN Tools child channel for youroperating system.TipKeep in mind, whenever a configuration file is deployed via RHN, a backup of the previousfile including its full path is made in the /var/lib/rhncfg/backups/ directory on theaffected system. The backup retains its filename but has a .rhn-cfg-backup extensionappended.B.1. Red Hat Network Actions ControlThe Red Hat Network Actions Control (rhn-actions-control) application is used to enable anddisable configuration management of a system. Client systems cannot be managed in this fashionby default. This tool allows Satellite Administrators to enable or disable specific modes of allowableactions such as: deploying a configuration file onto the system, uploading a file from the system, diffingwhat is currently managed on a system and what is available, or allowing running arbitrary remotecommands. These various modes are enabled/disabled by placing/removing files and directories inthe /etc/sysconfig/rhn/allowed-actions/ directory. Due to the default permissions on the/etc/sysconfig/rhn/ directory, RHN Actions Control will most likely have to be run by someonewith root access.B.1.1. General command line optionsThere is a man page available, as there are for most command line tools, though the use of this tool issimple enough to describe here briefly. Simply decide what RHN scheduled actions should be enabledfor use by system administrators. The following options enable the various scheduled action modes:Option Description--enable-deploy Allow rhncfg-client to deploy files.--enable-diff Allow rhncfg-client to diff files.--enable-upload Allow rhncfg-client to upload files.--enable-mtime-upload Allow rhncfg-client to upload mtime.--enable-all Allow rhncfg-client to do everything.--enable-run Enable script.run--disable-deploy Disable deployment.--disable-diff Disable diff--disable-upload Disable upload
