Nigel Kersten schrieb: > On Tue, Jun 2, 2009 at 2:48 PM, Luke Kanies <l...@madstop.com> wrote: > >>> * Do we still want an environment specified on the command line to be >>> overridden by an environment fact ? >>> (I'm unsure about which should take precedence myself) >> Erm, no idea? You tell me. > > I *think* that it would be more useful to be able to override your > environment fact on the command line, primarily as I'd use this for > testing various environments in --test mode.
+1 > I can't really see a security risk here, but I suppose people may have > configurations where they never want their facts overriden. Anyone ? puppetd runs as root. Callers of puppetd thus either are root themselves or should be treated with utmost care (i.e. having whitelists of allowed parameters and environment variables, like sudo does). This is a well-known, handleable problem. Regards, DavidS -- dasz.at OG Tel: +43 (0)664 2602670 Web: http://dasz.at Klosterneuburg UID: ATU64260999 FB-Nr.: FN 309285 g FB-Gericht: LG Korneuburg --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Developers" group. To post to this group, send email to puppet-dev@googlegroups.com To unsubscribe from this group, send email to puppet-dev+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-dev?hl=en -~----------~----~----~----~------~----~------~--~---