#!/var/cfengine/bin/cfagent -qKf

# cfengine-policy-description: if the following files exist, rename them by adding the extension .cfdisabled (/etc/hosts.equiv, /etc/shosts.equiv, /root/.rhosts, /.rhosts) and the following cron jobs which can spike CPU usage: /etc/cron.weekly/00-makewhatis.cron /etc/cron.daily/00-makewhatis.cron 

control:

    actionsequence = ( disable ) 	# rename the file by adding 
					# the extension .cfdisabled


disable:   
       

    # Disable passwordless system access

            /etc/hosts.equiv  inform=true

            /etc/shosts.equiv inform=true

    linux:: /root/.rhosts     inform=true
    linux:: /root/.shosts     inform=true

Red_Hat_Enterprise_Linux_ES_release_4|Red_Hat_Enterprise_Linux_AS_release_4:: 

             /etc/cron.weekly/00-makewhatis.cron  inform=true 
             /etc/cron.daily/00-makewhatis.cron   inform=true


    hpux::  /.rhosts inform=true
    hpux::  /.shosts inform=true