Issue #8158 has been updated by tgeeky -.

Status changed from Unreviewed to Accepted
Priority changed from High to Normal


with my patch applied for 
[[bug#8255]](http://projects.puppetlabs.com/issues/8255)

root@planck:/etc# puppet agent --no-manage_internal_file_permissions 
--genmanifest


    file { '/etc/puppet':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/log':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/state':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/run':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/lib':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/certs':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/public_keys':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/certificate_requests':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/private_keys':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/private':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/certs/planck.d-rive.info.pem':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/private_keys/planck.d-rive.info.pem':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/public_keys/planck.d-rive.info.pem':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/certs/ca.pem':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/crl.pem':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/ca_crt.pem':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/ca_key.pem':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/ca_pub.pem':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/ca_crl.pem':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/private':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/requests':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/signed':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/private/ca.pass':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/serial':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/ssl/ca/inventory.txt':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/puppet.conf':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/run/master.pid':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/manifests':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/manifests/site.pp':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/log/masterhttp.log':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/bucket':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/etc/puppet/auth.conf':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/yaml':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/server_data':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/reports':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/rrd':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/devices':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/state/state.yaml':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/client_yaml':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/client_data':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/state/classes.txt':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/clientbucket':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/state/last_run_summary.yaml':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/state/last_run_report.yaml':
    ensure   => 'file',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/state/graphs':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/facts':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }
    file { '/var/lib/puppet/templates':
    ensure   => 'directory',
    backup   => 'false',
    links    => 'follow',
    loglevel => 'debug',
    }

note a modeline in sight!
----------------------------------------
Bug #8158: Agent doesn't seem to honor manage_internal_file_permissions
https://projects.puppetlabs.com/issues/8158

Author: Joe McDonagh
Status: Accepted
Priority: Normal
Assignee: 
Category: 
Target version: 
Affected Puppet version: 2.6.7
Keywords: 
Branch: 


When setting this either in the config under main or agent, or running from CLI:

[/var/lib/puppet] > sudo puppet agent -t --no-manage_internal_file_permissions
info: Retrieving plugin
notice: /File[/var/lib/puppet/lib]/mode: mode changed '755' to '750'
notice: /File[/var/lib/puppet/lib/facter]/mode: mode changed '755' to '750'

This is pretty bad for me right now because devs rely on facts for all sorts of 
work (including revenue generation), and they rely on this running without 
root. 


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to