Re: [Puppet Users] puppet catalog security?

2020-03-28 Thread Henrik Lindberg
On 2020-03-28 16:23, Matt Zagrabelny wrote: On Sat, Mar 28, 2020 at 10:05 AM Henrik Lindberg mailto:henrik.lindb...@puppet.com>> wrote: On 2020-03-28 14:36, Matt Zagrabelny wrote: > > > On Sat, Mar 28, 2020 at 7:31 AM Henrik Lindberg >

Re: [Puppet Users] puppet catalog security?

2020-03-28 Thread Matt Zagrabelny
On Sat, Mar 28, 2020 at 10:05 AM Henrik Lindberg wrote: > On 2020-03-28 14:36, Matt Zagrabelny wrote: > > > > > > On Sat, Mar 28, 2020 at 7:31 AM Henrik Lindberg > > mailto:henrik.lindb...@puppet.com>> wrote: > > > > On 2020-03-28 02:42, Matt Zagrabelny wrote: > > > Greetings, > >

Re: [Puppet Users] puppet catalog security?

2020-03-28 Thread Henrik Lindberg
On 2020-03-28 14:36, Matt Zagrabelny wrote: On Sat, Mar 28, 2020 at 7:31 AM Henrik Lindberg mailto:henrik.lindb...@puppet.com>> wrote: On 2020-03-28 02:42, Matt Zagrabelny wrote: > Greetings, > > Suppose I have a class foo that host A gets via its catalog. Suppose >

Re: [Puppet Users] puppet catalog security?

2020-03-28 Thread Matt Zagrabelny
On Sat, Mar 28, 2020 at 7:31 AM Henrik Lindberg wrote: > On 2020-03-28 02:42, Matt Zagrabelny wrote: > > Greetings, > > > > Suppose I have a class foo that host A gets via its catalog. Suppose > > host B does not have foo in its catalog. Can host B do anything > > malicious to obtain the

Re: [Puppet Users] puppet catalog security?

2020-03-28 Thread Henrik Lindberg
On 2020-03-28 02:42, Matt Zagrabelny wrote: Greetings, Suppose I have a class foo that host A gets via its catalog. Suppose host B does not have foo in its catalog. Can host B do anything malicious to obtain the sensitive data in foo? My puppet master is using an ENC to generate the