Jira (PUP-4661) Puppet agent fights with RPM package over owner/group of certain directories

[James Ralston (JIRA)]

Title: Message Title

James Ralston created an issue   Puppet / PUP-4661 Puppet agent fights with RPM package over owner/group of certain directories Issue Type: Bug Affects Versions: PUP 4.1.0 Assignee: Unassigned Created: 2015/05/27 3:33 PM Environment: Red Hat Enterprise Linux Priority: Normal Reporter: James Ralston For Red Hat Enterprise Linux systems, the puppet-agent RPM packages the following directories as user root, group root: $ rpm --verify puppet-agent S.5....T. c /etc/puppetlabs/puppet/puppet.conf   $ ls -lsad /opt/puppetlabs/puppet/cache /var/log/puppetlabs/puppet /var/run/puppetlabs 4 drwxr-x---. 9 root root 4096 May 27 17:37 /opt/puppetlabs/puppet/cache/ 4 drwxr-x---. 2 root root 4096 May 19 19:32 /var/log/puppetlabs/puppet/ 4 drwxr-xr-x. 2 root root 4096 May 27 18:17 /var/run/puppetlabs/ However, when the puppet agent is invoked, it immediately changes the owner/group of these directories to puppet: $ env - /sbin/service puppet start Starting puppet agent: [ OK ] $ ls -lsad /opt/puppetlabs/puppet/cache /var/log/puppetlabs/puppet /var/run/puppetlabs 4 drwxr-x---. 9 puppet puppet 4096 May 27 17:37 /opt/puppetlabs/puppet/cache/ 4 drwxr-x---. 2 puppet puppet 4096 May 19 19:32 /var/log/puppetlabs/puppet/ 4 drwxr-xr-x. 2 puppet puppet 4096 May 27 18:21 /var/run/puppetlabs/ Changing the owner/group of these directories causes rpm verification of the package integrity to emit errors: $ rpm --verify puppet-agent S.5....T. c /etc/puppetlabs/puppet/puppet.conf .....UG.. /opt/puppetlabs/puppet/cache .....UG.. /var/log/puppetlabs/puppet .....UG.. /var/run/puppetlabs So, there are two possibilities: The above directories should be user puppet, group puppet, and the puppet RPM spec file is incorrect. The above directories should be user root, group root, and the behavior of the puppet agent is incorrect. Which is it? If it's the RPM spec file that's incorrect, then that should be trivial to fix, but correcting the behavior of the puppet agent might be a little harder. Add Comment   This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.