That kind of looks like the ini grammar format but w/o the square brackets. Maybe you can make a new grammar based on the ini one that works w/ this format.
Bill, there is a grammer file that will parse /etc/filesystems format. It is named aix_security.gm.
So in my template I have a part of the type Configuration File for /etc/filesystem. I just can't figure out though how to create the rule logically that gives me the result I need as described in my original post.
yeah - i see what you are saying. so i'm not sure how the rule is handling the grammar format here. if the rule is like:
foreach "Configuration File Entry:/tmp/filesystem//**"
Name = "vfs" AND
"Value1 as String (All OS)" = "nfs"
"Value1 as String (All OS)" does not contain "nosuid"
but that 'value1' in the 'then' is for the vfs line, there doesn't seem to be a way to look elsewhere in the context of the filesystem node.
Thanks for looking. I ended up creating an Extended Object script to look for nfs mounted file systems and if they have the nosuid optiont in effect.