Issue #4192 has been updated by Todd Zullinger.

Perhaps.  I was thinking of an install-time option instead of runtime because 
it seems like a once and done sort of thing.  That, and if it's needed in a 
config file, it makes updating rpm packages a little funny, since anyone that 
has modified the stock config won't get the the updated config option 
automatically.  We could add it manually to the puppet command line in the init 
script in that case, but that feels wrong.

(I've got no problem continuing to patch the defaults in the Fedora/EPEL 
packages.  Just figure that if we can come up with a solution that works for 
more distros/systems/users, all the better.)
----------------------------------------
Bug #4192: Puppet changes permissions on /var/run, causing security spam every 
night from OpenBSD
http://projects.puppetlabs.com/issues/4192

Author: Joe McDonagh
Status: Investigating
Priority: Normal
Assigned to: Matt Robinson
Category: 
Target version: Statler
Affected version: 0.25.4
Keywords: 
Branch: 


Puppet wants /var/run to be mod 1777 on OpenBSD, but it's mod 755:

<pre>
debug: /File[/var/run]: Changing mode
debug: /File[/var/run]: 1 change(s)
debug: /File[/var/run]/mode: mode changed '755' to '1777'
</pre>

I'm not really certain why puppet cares about that folder's permissions. 
Someone on IRC claimed this didn't happen on Linux, however on my Linux boxes 
my /var/run is mod 1777.

The end result of this is that the security reports from OpenBSD come in every 
night, when they should only be coming in when there is a security problem.




-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to