Issue #2014 has been updated by tmz.

Holding off sounds like a good plan.  I think a number of the parsed provider 
resources could benefit from a clean fix in this area, rather than adding 
special cases for each instance. :)

If it's possible when refactoring things, something that might be quite useful 
is to have a mode param for these resources, so that users who don't agree with 
the defaults can change them easily without adding a mostly redundant file 
resource.  For some of the types (yumrepo and ssh keys come to mind), the 
name/path of the file isn't always straightforward to determine, so adding a 
file resource to modify the mode can often be more work than it needs to be.

Thanks!

----------------------------------------
Bug #2014: sshkey creates /etc/ssh/ssh_known_hosts with mode 600
http://projects.reductivelabs.com/issues/2014

Author: tmz
Status: Accepted
Priority: Normal
Assigned to: luke
Category: ssh
Target version: 0.26.0
Complexity: Unknown
Affected version: 0.24.7
Keywords: ssh known_hosts


Using the sshkey type /etc/ssh/ssh_known_hosts is created with mode 600 by 
default.  This seems undesirable in most situations.  I think the default 
should be 644.  I didn't see anything obvious in the sshkey code that set it 
strictly on purpose.  Does puppet default to 600 somewhere?  And is there a 
simple way to tweak a type to use a different mode?  This seems like a similar 
issue to #1538.  Of course, it's not an inifile, so the fix will be different.


----------------------------------------
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://reductivelabs.com/redmine/my/account

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to