cfscores

The functionality typically associated with 'cfscores' is accessed through the cf-hub command with its --scores option.

cf-hub [options] --scores [score_options]

While not a direct command, this syntax represents how CFEngine compliance scores are queried on the policy server.

--scores
    Triggers the display of policy compliance scores.

--host
    Filters scores to display for hosts matching the specified pattern.

--policy
    Filters scores based on policy names matching the specified pattern.

--json
    Outputs the score data in JSON format for programmatic parsing.

--summary
    Displays an aggregated summary of policy scores across all managed hosts.

--list-host-scores
    Provides a detailed list of individual host scores, including all policy scores.

--limit
    Limits the number of hosts or entries displayed in the score output.

--body
    Filters scores for policies containing a specific body name pattern.

--tag
    Filters scores based on host tags matching the specified pattern.

The cfscores command is not a standard, standalone Linux utility. It most commonly refers to the concept of policy compliance scores within the CFEngine automation and configuration management system. In CFEngine 3 and later versions, these scores quantify how well a host adheres to defined policies, rules, and desired states. They provide an aggregated view of compliance, helping administrators identify non-compliant systems or policy violations.

While a direct `cfscores` executable does not typically exist, the functionality to view these scores is integrated into CFEngine tools, notably via options like cf-hub --scores on the policy server or through the CFEngine Mission Portal. The scores are derived from policy evaluations performed by cf-agent on client hosts and aggregated by cf-hub on the policy server, offering crucial insights into the overall health and security posture of the managed infrastructure.

The term 'cfscores' does not refer to a standalone executable on most Linux systems. Its functionality is exclusively provided as part of the CFEngine configuration management suite, primarily through the cf-hub utility. Therefore, its availability and behavior are entirely dependent on a CFEngine installation and its version. Users not running CFEngine will not have access to 'cfscores' functionality. Custom scripts might use 'cfscores' as a conceptual name, but these are not part of a standard distribution.

CFEngine policy scores are calculated based on the outcomes of policy promises on each client host. For each promise, cf-agent reports a status (e.g., kept, repaired, failed, not_applicable, etc.). These statuses are aggregated by cf-hub on the policy server. Scores are often presented as percentages, indicating the proportion of promises kept or the level of deviation from the desired state. High scores (e.g., 100%) indicate full compliance, while lower scores highlight areas requiring attention or remediation.

While cf-hub --scores provides command-line access, the CFEngine Mission Portal offers a comprehensive graphical interface for visualizing policy compliance scores. It provides dashboards, historical trends, and drill-down capabilities, making it easier for administrators to monitor the compliance posture of their entire infrastructure, identify top non-compliant hosts or policies, and generate reports.

The concept of policy compliance scores was introduced and refined within CFEngine 3, specifically designed to provide quantitative metrics on the state of managed infrastructure. This feature was developed to help organizations maintain continuous compliance, identify deviations from desired states, and provide an objective measure of their configuration management effectiveness. The integration of score reporting into cf-hub (the CFEngine policy server) became a key component for both command-line and graphical reporting (via the CFEngine Mission Portal), evolving with subsequent CFEngine releases to offer more detailed insights and reporting options.

cf-hub(8), cf-agent(8), cf-serverd(8), cf-promises(8), cf-key(8)