Jira (PUP-2732) Validation of Exec-Attribute user limits usability with non-root user.

[Joshua Partlow (JIRA)]

Title: Message Title

Joshua Partlow commented on an issue   Re: Validation of Exec-Attribute user limits usability with non-root user. Verified on rhel6 that root can change users; non-root user cannot. [root@ayh7j6d0yegotoq ~]# puppet apply -e "exec { '/tmp/test.sh': logoutput => true }" Notice: Compiled catalog for ayh7j6d0yegotoq.delivery.puppetlabs.net in environment production in 0.05 seconds Notice: /Stage[main]/Main/Exec[/tmp/test.sh]/returns: hi Notice: /Stage[main]/Main/Exec[/tmp/test.sh]/returns: executed successfully Notice: Finished catalog run in 0.13 seconds [root@ayh7j6d0yegotoq ~]# puppet apply -e "exec { '/tmp/test.sh': logoutput => true, user => test }" Notice: Compiled catalog for ayh7j6d0yegotoq.delivery.puppetlabs.net in environment production in 0.05 seconds Notice: /Stage[main]/Main/Exec[/tmp/test.sh]/returns: hi Notice: /Stage[main]/Main/Exec[/tmp/test.sh]/returns: executed successfully Notice: Finished catalog run in 0.10 seconds [root@ayh7j6d0yegotoq ~]# su - test [test@ayh7j6d0yegotoq ~]$ puppet apply -e "exec { '/tmp/test.sh': logoutput => true }" Notice: Compiled catalog for ayh7j6d0yegotoq.delivery.puppetlabs.net in environment production in 0.04 seconds Notice: /Stage[main]/Main/Exec[/tmp/test.sh]/returns: hi Notice: /Stage[main]/Main/Exec[/tmp/test.sh]/returns: executed successfully Notice: Finished catalog run in 0.11 seconds [test@ayh7j6d0yegotoq ~]$ puppet apply -e "exec { '/tmp/test.sh': logoutput => true, user => root }" Notice: Compiled catalog for ayh7j6d0yegotoq.delivery.puppetlabs.net in environment production in 0.05 seconds Error: Parameter user failed on Exec[/tmp/test.sh]: Only root can execute commands as other users at line 1 Wrapped exception: Only root can execute commands as other users Add Comment   Puppet / PUP-2732 Validation of Exec-Attribute user limits usability with non-root user. Our customer will only use Puppet if all necessary operations are possible running Puppet without root privileges. Actually Puppet agent validates the user attribute of exec ressource that way, that it's fully unsupported if running without root user. Doing so, the following error message is printed and execution aborted: {code} Error: Failed to apply c... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.