Issue #8158 has been updated by tgeeky -.
Category set to plug-ins
Status changed from Re-opened to Accepted
More testing:
I added a line inside in
<puppet source>/puppet/lib/puppet/util/settings.rb
like
if Puppet[:manage_internal_file_permissions]
resource[:mode] = self.mode if self.mode
warn ("inside file_setting.rb -> to_resource() -> :manage_internal:
#{path}")
if Puppet.features.root?
resource[:owner] = self.owner if self.owner
resource[:group] = self.group if self.group
end
end
and I changed the file permissions to something stupid:
root@planck:~/puppet# chown puppet:bin /var/lib/puppet/lib;chmod 700
/var/lib/puppet/lib;ls -ld /var/lib/puppet/lib
drwx------ 3 puppet bin 4096 2011-07-07 17:57 /var/lib/puppet/lib
puppet plugin download --no-manage_internal_file_permissions
notice: /File[/var/lib/puppet/lib]/owner: owner changed 'puppet' to 'root'
notice: /File[/var/lib/puppet/lib]/group: group changed 'bin' to 'root'
notice: /File[/var/lib/puppet/lib]/mode: mode changed '700' to '775'
notice: /File[/var/lib/puppet/lib/puppet]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/parser]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/parser/functions]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/abs.rb]/ensure:
defined content as '{md5}16b8452a5066dfeacef11c8a77355220'
running without the --no-manage_internal...
root@planck:~/puppet# puppet plugin download
inside file_setting.rb -> to_resource() -> :manage_internal: /etc/puppet
inside file_setting.rb -> to_resource() -> :manage_internal: /var/lib/puppet
inside file_setting.rb -> to_resource() -> :manage_internal:
/var/lib/puppet/log
inside file_setting.rb -> to_resource() -> :manage_internal:
/var/lib/puppet/state
inside file_setting.rb -> to_resource() -> :manage_internal:
/var/lib/puppet/run
inside file_setting.rb -> to_resource() -> :manage_internal:
/var/lib/puppet/lib
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/certs
inside file_setting.rb -> to_resource() -> :manage_internal: /etc/puppet/ssl
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/public_keys
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/certificate_requests
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/private_keys
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/private
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/certs/planck.d-rive.info.pem
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/private_keys/planck.d-rive.info.pem
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/public_keys/planck.d-rive.info.pem
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/certs/ca.pem
inside file_setting.rb -> to_resource() -> :manage_internal:
/etc/puppet/ssl/crl.pem
inside file_setting.rb -> to_resource() -> :manage_internal:
/var/lib/puppet/facts
notice: /File[/var/lib/puppet/lib]/owner: owner changed 'puppet' to 'root'
notice: /File[/var/lib/puppet/lib]/group: group changed 'bin' to 'root'
notice: /File[/var/lib/puppet/lib]/mode: mode changed '700' to '775'
Downloaded these plugins: /var/lib/puppet/lib
more info forthcoming, hopefully.
----------------------------------------
Bug #8158: Agent doesn't seem to honor manage_internal_file_permissions
https://projects.puppetlabs.com/issues/8158
Author: Joe McDonagh
Status: Accepted
Priority: Normal
Assignee: tgeeky -
Category: plug-ins
Target version:
Affected Puppet version: 2.6.7
Keywords:
Branch:
When setting this either in the config under main or agent, or running from CLI:
[/var/lib/puppet] > sudo puppet agent -t --no-manage_internal_file_permissions
info: Retrieving plugin
notice: /File[/var/lib/puppet/lib]/mode: mode changed '755' to '750'
notice: /File[/var/lib/puppet/lib/facter]/mode: mode changed '755' to '750'
This is pretty bad for me right now because devs rely on facts for all sorts of
work (including revenue generation), and they rely on this running without
root.
--
You have received this notification because you have either subscribed to it,
or are involved in it.
To change your notification preferences, please click here:
http://projects.puppetlabs.com/my/account
--
You received this message because you are subscribed to the Google Groups
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/puppet-bugs?hl=en.
