...
Policy Caveats and Limitations
...
- The parsing system currently used for the
THEN
statements uses the string<space>AND<space>
as separator, therefore the exception or ok rule name cannot contain that text. Lowercase <space>all
<space> is fine, however. - At this time, all compliance policy rules are evaluated on a per-node basis. Extending this system to support policies that can span the whole organization are already planned for future releases.
Policy Management
All policies are named and versioned, and managed through opconfig-cli.pl
(but advanced GUI-based management is already planned for the next releases).
...