Jira (PUP-9719) Cannot run Puppet Agent as Administrator if first PA run is done as System

Title: Message Title

Josh Cooper commented on

To reproduce:

require 'puppet'

require 'puppet/util/windows'

class Tester

  include Puppet::Util::Windows::Security

  def replace_file(path, mode)

    if Puppet::FileSystem.exist?(path)

      Puppet::FileSystem.unlink(path)

end

    Puppet::FileSystem.touch(path)

    dacl = Puppet::Util::Windows::AccessControlList.new

    dacl.allow(Puppet::Util::Windows::SID::LocalSystem,

               Puppet::Util::Windows::File::FILE_ALL_ACCESS)

    dacl.allow(Puppet::Util::Windows::SID::BuiltinAdministrators,

               Puppet::Util::Windows::File::FILE_ALL_ACCESS)

    sd = Puppet::Util::Windows::SecurityDescriptor.new(

      Puppet::Util::Windows::SID::LocalSystem,

      Puppet::Util::Windows::SID::LocalSystem,

      dacl,

      true

    set_security_descriptor(path, sd)

    dump_sd(path)

    set_mode(mode, path)

    dump_sd(path)

end

  def dump_sd(path)

    sd = get_security_descriptor(path)

    puts "Owner: #{sd.owner}"

    puts "Group: #{sd.group}"

    puts "DACL:"

    puts sd.dacl.inspect

end

end

tester = Tester.new

tester.replace_file('c:\Users\josh\newfile.txt', 0640)

Produces:

C:\Users\josh>ruby dacl.rb

Owner: S-1-5-18

Group: S-1-5-18

DACL:

  NT AUTHORITY\SYSTEM:                          0x1f01ff

  BUILTIN\Administrators:                       0x1f01ff

Owner: S-1-5-18

Group: S-1-5-18

DACL:

  NT AUTHORITY\SYSTEM:                          0x1f01ff

  Everyone:                                     0x120080

This message was sent by Atlassian JIRA

--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.310162.1558726819000.33976.1579737480752%40Atlassian.JIRA.

Reply via email to