Jira (PUP-1255) Default file mode is now 0600 instead of 0644

[Joshua Cooper (JIRA)]

Title: Message Title

Joshua Cooper commented on an issue   Re: Default file mode is now 0600 instead of 0644 The issue is being triggered because for some reason, on 2012, files created in the temp directory (C:\Users\username\AppData\Local\Temp*) have pseudo-inherited ACLs. Using setacl, you can see: PS C:\users\josh\AppData\local> setacl -on .\temp\newdir -ot file -actn list -lst "f:tab;w:d,s,o,g;i:y" .\temp\newdir Owner: WIN-85MJMOPCCE6\josh Group: WIN-85MJMOPCCE6\None DACL(not_protected): NT AUTHORITY\SYSTEM full allow pseudo_inherited+container_inherit+object_inherit BUILTIN\Administrators full allow pseudo_inherited+container_inherit+object_inherit WIN-85MJMOPCCE6\josh full allow pseudo_inherited+container_inherit+object_inherit SACL: [NULL] Later when the Windows ReplaceFile API is called, it merges the source (an empty temp file) and destination ACLs, instead of just preserving the source ACLs. This has security implications and needs to be understood. Separately, the test should be made more resilient by protecting the playground directory so that we can be be sure what permissions to expect on the newly created file. Add Comment   Puppet / PUP-1255 Default file mode is now 0600 instead of 0644 As of Puppet 3.4.1 and 2.7.24, the default file mode when no mode is explicitly specified on a file resource has changed from 0644 to 0600. It appears from the commits (https://github.com/puppetlabs/puppet/commit/65909fbe and 691fbbeaa) that this was not the intention. {noformat} # rpm -q puppet puppet-3.4.0-1.el6.noarch # puppet apply -e 'file { "... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/groups/opt_out.