Jira (PUP-6936) unable to read last_run_summary.yaml from user

[Moses Mendoza (JIRA)]

Title: Message Title

Moses Mendoza commented on PUP-6936   Re: unable to read last_run_summary.yaml from user It appears this has been the case since the introduction of the puppet-agent package when these things moved under cache. It looks like it might go back further though, as in the last version shipped as the 'puppet' package (by Puppet that is), 3.8.7, the last_run_summary.yaml and its parent directory are world readable, but /var/lib/puppet isn't: [root@rhel7 puppet]# ls -l /var/lib ... drwxr-x---. 12 puppet puppet 4096 Oct 7 14:11 puppet ... [root@rhel7 puppet]# puppet --version 3.8.7 [root@rhel7 puppet]# ls -l /var/lib/puppet/ total 0 drwxr-x---. 2 root root 6 Oct 7 14:11 clientbucket drwxr-x---. 2 root root 6 Oct 7 14:11 client_data drwxr-x---. 2 root root 6 Oct 7 14:11 client_yaml drwxr-xr-x. 2 root root 6 Oct 7 14:11 facts.d drwxr-xr-x. 2 root root 6 Oct 7 14:11 lib drwxr-x---. 2 puppet puppet 6 Oct 7 14:11 preview drwxr-x---. 3 puppet puppet 30 Oct 7 14:11 reports drwxr-x---. 2 puppet puppet 6 Oct 7 14:11 rrd drwxrwx--x. 7 puppet puppet 96 Oct 7 14:11 ssl drwxr-xr-t. 3 puppet puppet 91 Oct 7 14:11 state [root@rhel7 puppet]# ls -l /var/lib/puppet/state/ total 16 drwxr-xr-x. 2 root root 6 Oct 7 14:11 graphs -rw-rw----. 1 root root 6900 Oct 7 14:11 last_run_report.yaml -rw-r--r--. 1 root root 455 Oct 7 14:11 last_run_summary.yaml -rw-rw----. 1 root root 3367 Oct 7 14:11 state.yaml puppet package in EPEL, meanwhile does not have this problem: [root@rhel7 ~]# ls -l /var/lib ... drwxr-xr-x. 11 puppet puppet 4096 Nov 21 16:18 puppet ... [root@rhel7 ~]# ls -l /var/lib/puppet total 0 drwxr-x---. 2 root root 6 Nov 21 16:18 clientbucket drwxr-x---. 2 root root 6 Nov 21 16:18 client_data drwxr-x---. 2 root root 6 Nov 21 16:18 client_yaml drwxr-xr-x. 2 root root 6 Nov 21 16:18 facts.d drwxr-xr-x. 2 root root 6 Nov 21 16:18 lib drwxr-xr-x. 3 root root 30 Nov 21 16:18 reports drwxr-x---. 2 puppet puppet 6 Nov 21 16:18 rrd drwxrwx--x. 7 puppet puppet 96 Nov 21 16:18 ssl drwxr-xr-t. 3 root root 91 Nov 21 16:18 state [root@rhel7 ~]# ls -l /var/lib/puppet/state total 16 drwxr-xr-x. 2 root root 6 Nov 21 16:18 graphs -rw-rw----. 1 root root 6909 Nov 21 16:18 last_run_report.yaml -rw-r--r--. 1 root root 465 Nov 21 16:18 last_run_summary.yaml -rw-rw----. 1 root root 3220 Nov 21 16:18 state.yaml This should get fixed IMO. With Puppet Agent we'll just want to make sure everything that lives in /opt/puppetlabs/puppet/cache is appropriately permissioned and not relying on that directory not being world readable. Add Comment   This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.