Issue #15471 has been updated by Matthaus Litteken.
This can be overridden using the owner, group, mode arguments to a puppet.conf
directive...
Adding this to puppet.conf
`lastrunfile = $statedir/last_run_summary.yaml { owner = service, group =
service, mode = 644 }`
Makes the file puppet:puppet and 644.
----------------------------------------
Bug #15471: last_run_summary.yaml is only readable by root
https://projects.puppetlabs.com/issues/15471#change-67019
Author: R.I. Pienaar
Status: Unreviewed
Priority: Normal
Assignee:
Category:
Target version:
Affected Puppet version:
Keywords:
Branch:
The work for CVE-2012-3866 also changed the permissions for this file which
does not contain sensitive information imo and should not be restricted to root
only. This relates to #7106 that moved this to world readable and contained a
justification why etc.
https://github.com/puppetlabs/puppet/commit/fd44bf5
--
You have received this notification because you have either subscribed to it,
or are involved in it.
To change your notification preferences, please click here:
http://projects.puppetlabs.com/my/account
--
You received this message because you are subscribed to the Google Groups
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/puppet-bugs?hl=en.
