Issue #2451 has been updated by Larry Ludwig.

The issue is concerning security and the implied change, which is bad if 
someone is purposely setting a folder to have say 740 perms (to prevent 
directly listing).  This was brought as an issue by two persons in the NYC 
Puppet Training course.  To me, this additional option would be an acceptable 
work around for recursion. 

Either way if not recursive (creating a directory, the mode should be set to 
what's specified, not what it think it's best even if the user did it by 
mistake.
----------------------------------------
Bug #2451: File type should support separate directory permissions
http://projects.reductivelabs.com/issues/2451

Author: Larry Ludwig
Status: Accepted
Priority: Normal
Assigned to: 
Category: file
Target version: 
Complexity: Unknown
Affected version: 0.24.8
Keywords: 


If you do:
<pre>
file { '/tmp/test':
        mode => '644',
        ensure => directory,
}

[r...@localhost manifests]# puppet resource_defaults.pp --verbose --debug
debug: Creating default schedules
debug: Failed to load library 'ldap' for feature 'ldap'
debug: Finishing transaction -606516548 with 0 changes
debug: //File[/tmp/test]: Changing mode
debug: //File[/tmp/test]: 1 change(s)
notice: //File[/tmp/test]/mode: mode changed '777' to '755'
debug: Finishing transaction -605478848 with 1 changes
</pre>
The mode set it NOT correct it should be set to 644 for that folder.  This is 
because of security reasons.




-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://reductivelabs.com/redmine/my/account

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to