Issue #4916 has been updated by eric sorenson.
- makes upgrading awful - appears to trigger a bug if you add core-override plugins and then later (perhaps in an attempt to upgrade) try to remove them Feb 17 03:36:25db005 puppetd[12917]: (/File[/var/lib/puppet/lib/puppet/type/mount.rb]/ensure) change from absent to file failed: Could not find any content at puppet://puppet/pl ugins/puppet/type/mount.rb Feb 17 03:36:26 db005 puppetd[12917]: Could not retrieve catalog from remote server: Error 400 on SERVER: Failed to parse template puppet-client/puppet.conf.erb: Could not find value for 'operatingsystem' at /etc/puppetlabs/puppet-test/modules/puppet-client/manifests/config.pp:5 on node nk11p03me-db005.me.com ---------------------------------------- Bug #4916: Plugins should not be able to override core functionality. https://projects.puppetlabs.com/issues/4916 Author: Nigel Kersten Status: Accepted Priority: Normal Assignee: Category: Target version: Affected Puppet version: Keywords: Branch: If you take core functionality like a provider, say puppet/providers/package/apt.rb and copy it to a module libdir, and then have pluginsync on... then anyone consuming that modulepath, regardless of whether they consume this particular module, will have this plugin override the core functionality. I think this is a problem. It really doesn't seem like a good idea from a security point of view for plugins to be able to override an equivalent core library. I understand that some people find this useful for patching functionality with providers. This doesn't make it right. They should instead be inheriting from the desired provider and specifying the provider they want. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
