Jira (PUP-10100) Exec resource should not leak sensitive commands when a relative path is given

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper created an issue   Puppet / PUP-10100 Exec resource should not leak sensitive commands when a relative path is given Issue Type: Bug Assignee: Unassigned Created: 2019/10/11 9:56 AM Priority: Normal Reporter: Josh Cooper From: https://tickets.puppetlabs.com/browse/PUP-6494?focusedCommentId=692157&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-692157 exec { "echo_passphrase": command => Sensitive("echo \"${secretpw.unwrap}\""), } Error: Failed to apply catalog: Validation of Exec[populate_luksfile] failed: 'echo "supersecretpassword"' is not qualified and no path was specified. Please qualify the command or specify a path. The issue is the error message includes the entire command to execute, instead of the first component of command which wasn't an absolute path. Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.329033.1570812974000.140175.1570813021076%40Atlassian.JIRA.