Jira (PUP-6223) Puppet should not be managing /usr/local/bin

[Jason Balicki (JIRA)]

Title: Message Title

Jason Balicki commented on PUP-6223   Re: Puppet should not be managing /usr/local/bin I was the customer that asked this bug be opened. Disregard the fact that this was identified by using the os_hardening module – it's a problem outside of that. The puppet enterprise "symlinks" class that manages the symlinks in /usr/local/bin claims /usr/local/bin as its own. This means that a customer can not manage that directory in the way they see fit. There are many legitimate reasons that a user would want to manage permissions and ownership on /usr/local/bin and this method that Puppet uses prevents that. Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Evaluation Error: Error while evaluating a Resource Statement, Evaluation Error: Error while evaluating a Resource Statement, Duplicate declaration: File[/usr/local/bin] is already declared in file /etc/puppetlabs/code/environments/production/modules/os_hardening/manifests/minimize_access.pp:27; cannot redeclare at /opt/puppetlabs/puppet/modules/puppet_enterprise/manifests/symlinks.pp:31 at /opt/puppetlabs/puppet/modules/puppet_enterprise/manifests/symlinks.pp:31:5 on node cncpxblct1001.xxx.com Warning: Not using cache on failed catalog Error: Could not retrieve catalog; skipping run You can not work around this by changing the resource title since Puppet now resolves the actual item being managed regardless of the title. That's probably a good thing, but it breaks a lot of modules where you might do that on purpose. You will receive something like: Error while evaluating a Resource Statement, Cannot alias File[os_hardening /usr/local/bin] to ["/usr/local/bin"] at /etc/puppetlabs/code/environments/production/modules/os_hardening/manifests/pathperms.pp:3; resource ["File", "/usr/local/bin"] already declared at /opt/puppetlabs/puppet/modules/puppet_enterprise/manifests/symlinks.pp:31 at /etc/puppetlabs/code/environments/production/modules/os_hardening/manifests/pathperms.pp:3:3 at /etc/puppetlabs/code/environments/production/modules/os_hardening/manifests/minimize_access.pp:31 on node cncdxocjb1001.xxx.com Add Comment   This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.