Jira (PUP-1464) suggest pkgdmg and apple providers use /usr/sbin/installer -allowUntrusted as default

[Kylo Ginsberg (JIRA)]

Title: Message Title

Kylo Ginsberg commented on an issue   Re: suggest pkgdmg and apple providers use /usr/sbin/installer -allowUntrusted as default Offhand, defaulting to allow untrusted sources concerns me and feels like a security vulnerability. My leaning is that this should stay explicit, maybe as an install_option. Thoughts? Add Comment   Puppet / PUP-1464 suggest pkgdmg and apple providers use /usr/sbin/installer -allowUntrusted as default Makes sense to me that if I am bothering to use puppet to install something, I am happy with the trust worthiness of the source. This would take a minor change to puppet/lib/puppet/provider/pkgdmg and puppet/lib/puppet/provider/apple adding the -allowUntrusted switch the the underlying command. in each case the line     installer "-pkg", source, "-tar... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/groups/opt_out.