Jira (PUP-1986) Permissions for libdir are set arbitrarily

Joshua Cooper (JIRA) Fri, 11 Apr 2014 14:25:26 -0700

Title: Message Title

Joshua Cooper commented on an issue

This is a tricky one to reproduce. The PE related tickets mention that the module on the master has permissions pe-puppet:pe-puppet:750, which when pluginsynced for the first time to the agent on the master, will have permissions root:root:750. When the master next tries to load that code using the autoloader, e.g. compile a manifest, it does so in this order:

                                                        def search_directories(env)
      [gem_directories, module_directories(env), libdirs(), $LOAD_PATH].flatten
    end

                                                

If the master loads a type, etc from its module_directory, and that file contains require 'helper', then the ruby process will try to load the helper code from $LOAD_PATH.

However, puppet's settings will add its libdir to the $LOAD_PATH:

                                                        :libdir => {
        :type           => :directory,
        :default        => "$vardir/lib",
        ...
        :hook             => proc do |value|
          $LOAD_PATH.delete(@oldlibdir) if defined?(@oldlibdir) and $LOAD_PATH.include?(@oldlibdir)
          @oldlibdir = value
          $LOAD_PATH << value
        end

                                                

Still working on reproducing...

Add Comment

Puppet /

PUP-1986

It appears that the mode for libdir is set during pluginsync, to the mode of the lib/ directory of some module being synced (apparently whichever comes first). However, the owner and group are always set to root. This means that a module which is readable only by puppet in the modulepath becomes readable only by root in the libdir. That causes problems fo...

This message was sent by Atlassian JIRA

--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.

Jira (PUP-1986) Permissions for libdir are set arbitrarily

Reply via email to