Jira (PUP-5480) Puppet does not apply inheritable SYSTEM permissions to directories it manages on Windows under certain circumstances

[Ethan Brown (JIRA)]

Title: Message Title

Ethan Brown commented on PUP-5480   Re: Puppet does not apply inheritable SYSTEM permissions to directories it manages on Windows under certain circumstances For Ryan Gard, use the following manifest to repro: file { 'c:/windows/temp/foo_dir': ensure => 'directory', group => 'None', mode => '600' } ~>   exec { 'show_dir_perms': logoutput => true, command => 'c:\\windows\\system32\\cmd.exe /c icacls c:\\windows\\temp\\foo_dir' } ~>   file { 'c:/windows/temp/foo_dir/bar.txt': ensure => 'present' } ~>   exec { 'show_file_perms': logoutput => true, command => 'c:\\windows\\system32\\cmd.exe /c icacls c:\\windows\\temp\\foo_dir\\bar.txt' } In the previous failing code (dupe output snipped), we get: Notice: Compiled catalog for vagrant-2008r2 in environment production in 0.31 seconds Notice: /Stage[main]/Main/File[c:/windows/temp/foo_dir]/ensure: created   Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: c:\\windows\\temp\\foo_dir BUILTIN\Administrators:(F) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: VAGRANT-2008R2\None:(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: Everyone:(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: NT AUTHORITY\SYSTEM:(F) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: CREATOR OWNER:(CI)(IO)(F) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: CREATOR GROUP:(CI)(IO)(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: CREATOR OWNER:(OI)(IO)(R,W,D,WDAC,WO,DC) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: CREATOR GROUP:(OI)(IO)(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: Successfully processed 1 files; Failed processing 0 files Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: executed successfully Notice: /Stage[main]/Main/Exec[show_dir_perms]: Triggered 'refresh' from 1 events   Notice: /Stage[main]/Main/File[c:/windows/temp/foo_dir/bar.txt]/ensure: created   Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: c:\\windows\\temp\\foo_dir\\bar.txt BUILTIN\Administrators:(I)(R,W,D,WDAC,WO,DC) Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: VAGRANT-2008R2\None:(I)(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: Successfully processed 1 files; Failed processing 0 files Notice: /Stage[main]/Main/Exec[show_file_perms]: Triggered 'refresh' from 1 events   Notice: Finished catalog run in 4.17 seconds A successful run, in contrast, looks something like (duplicate output snipped): Notice: Compiled catalog for vagrant-2008r2 in environment production in 0.31 seconds Notice: /Stage[main]/Main/File[c:/windows/temp/foo_dir]/ensure: created   Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: c:\\windows\\temp\\foo_dir BUILTIN\Administrators:(F) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: VAGRANT-2008R2\None:(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: Everyone:(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: NT AUTHORITY\SYSTEM:(OI)(CI)(F) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: CREATOR OWNER:(CI)(IO)(F) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: CREATOR GROUP:(CI)(IO)(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: CREATOR OWNER:(OI)(IO)(R,W,D,WDAC,WO,DC) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: CREATOR GROUP:(OI)(IO)(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: Successfully processed 1 files; Failed processing 0 files Notice: /Stage[main]/Main/Exec[show_dir_perms]/returns: executed successfully Notice: /Stage[main]/Main/Exec[show_dir_perms]: Triggered 'refresh' from 1 events   Notice: /Stage[main]/Main/File[c:/windows/temp/foo_dir/bar.txt]/ensure: created   Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: c:\\windows\\temp\\foo_dir\\bar.txt NT AUTHORITY\SYSTEM:(I)(F) Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: BUILTIN\Administrators:(I)(R,W,D,WDAC,WO,DC) Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: VAGRANT-2008R2\None:(I)(Rc,S,RA) Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: Successfully processed 1 files; Failed processing 0 files Notice: /Stage[main]/Main/Exec[show_file_perms]/returns: executed successfully Notice: /Stage[main]/Main/Exec[show_file_perms]: Triggered 'refresh' from 1 events Notice: Finished catalog run in 4.19 seconds Add Comment   This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.