Jira (PUP-9337) Puppet sets permissions for Puppet files every run

[Paul Schaffer (JIRA)]

Title: Message Title

Paul Schaffer commented on PUP-9337   Re: Puppet sets permissions for Puppet files every run A user was able to reproduce these conditions during an upgrade from 5.3.3 to 5.5.8. Notably, when performing the upgrade they observe permissions shifting to a higher level, then the agent run attempting to lower them back down: With an agent version 5.3.3, prior to upgrade: C:\WINDOWS\system32>puppet resource file C:\ProgramData\PuppetLabs\puppet\cache\state\package_inventory_enabled file { 'C:\ProgramData\PuppetLabs\puppet\cache\state\package_inventory_enabled': ... mode => '0664', ... }   C:\WINDOWS\system32>puppet resource file C:\ProgramData\PuppetLabs\pxp-agent\etc\pxp-agent.conf file { 'C:\ProgramData\PuppetLabs\pxp-agent\etc\pxp-agent.conf': ... mode => '0660', ... } Immediately following the upgrade to 5.5.8, the permissions have been raised to '0770': C:\WINDOWS\system32>puppet resource file C:\ProgramData\PuppetLabs\puppet\cache\state\package_inventory_enabled file { 'C:\ProgramData\PuppetLabs\puppet\cache\state\package_inventory_enabled': ... mode => '0770', ... }   C:\WINDOWS\system32>puppet resource file C:\ProgramData\PuppetLabs\pxp-agent\etc\pxp-agent.conf file { 'C:\ProgramData\PuppetLabs\pxp-agent\etc\pxp-agent.conf': ... mode => '0770', ... } And then after the agent run we can see the mismatched '0670': C:\WINDOWS\system32>puppet resource file C:\ProgramData\PuppetLabs\pxp-agent\etc\pxp-agent.conf file { 'C:\ProgramData\PuppetLabs\pxp-agent\etc\pxp-agent.conf': ... mode => '0670', ... }   C:\WINDOWS\system32>puppet resource file C:\ProgramData\PuppetLabs\puppet\cache\state\package_inventory_enabled file { 'C:\ProgramData\PuppetLabs\puppet\cache\state\package_inventory_enabled': ... mode => '0674', ... } Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.