Issue #15471 has been updated by R.I. Pienaar.

The syntax for setting owner/mode that way fails, logs errors and yields 0 byte 
files.

<pre>
/usr/lib/ruby/site_ruby/1.8/puppet/configurer.rb:184:in `chmod'
/usr/lib/ruby/site_ruby/1.8/puppet/configurer.rb:184:in `save_last_run_summary'
/usr/lib/ruby/site_ruby/1.8/puppet/util/file_locking.rb:42:in `writelock'
/usr/lib/ruby/site_ruby/1.8/puppet/external/lock.rb:34:in `lock_exclusive'
/usr/lib/ruby/site_ruby/1.8/puppet/util/file_locking.rb:38:in `writelock'
/usr/lib/ruby/site_ruby/1.8/puppet/util/file_locking.rb:37:in `open'
/usr/lib/ruby/site_ruby/1.8/puppet/util/file_locking.rb:37:in `writelock'
/usr/lib/ruby/site_ruby/1.8/puppet/util.rb:43:in `synchronize_on'
/usr/lib/ruby/1.8/sync.rb:230:in `synchronize'
/usr/lib/ruby/site_ruby/1.8/puppet/util.rb:43:in `synchronize_on'
/usr/lib/ruby/site_ruby/1.8/puppet/util/file_locking.rb:36:in `writelock'
/usr/lib/ruby/site_ruby/1.8/puppet/configurer.rb:183:in `save_last_run_summary'
/usr/lib/ruby/site_ruby/1.8/puppet/configurer.rb:174:in `send_report'
/usr/lib/ruby/site_ruby/1.8/puppet/configurer.rb:169:in `run'
/usr/lib/ruby/site_ruby/1.8/puppet/application/apply.rb:239:in `main'
/usr/lib/ruby/site_ruby/1.8/puppet/application/apply.rb:153:in `run_command'
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:309:in `run'
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:416:in `hook'
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:309:in `run'
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:407:in `exit_on_fail'
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:309:in `run'
/usr/lib/ruby/site_ruby/1.8/puppet/util/command_line.rb:69:in `execute'
/usr/bin/puppet:4
err: Could not save last run local report: can't convert String into Integer
</pre>

<pre>
-rw-r--r-- 1 puppet puppet      0 Jul 16 10:17 last_run_summary.yaml
</pre>
----------------------------------------
Bug #15471: last_run_summary.yaml is only readable by root
https://projects.puppetlabs.com/issues/15471#change-67024

Author: R.I. Pienaar
Status: Unreviewed
Priority: Normal
Assignee: 
Category: 
Target version: 
Affected Puppet version: 
Keywords: 
Branch: 


The work for CVE-2012-3866 also changed the permissions for this file which 
does not contain sensitive information imo and should not be restricted to root 
only.  This relates to #7106 that moved this to world readable and contained a 
justification why etc.

https://github.com/puppetlabs/puppet/commit/fd44bf5


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to