Uploaded image for project: 'Puppet Agent'
  1. Puppet Agent
  2. PA-726

Materials in {{/etc/puppetlabs}} should not be world readable by default

    XMLWordPrintable

Details

    • Bug
    • Status: Accepted
    • Normal
    • Resolution: Unresolved
    • puppet-agent 1.6.0
    • None
    • Security
      • CentOS 7 x86_64
      • Installed via RPM from yum.puppetlabs.com
    • Platform OS

    Description

      After installing the AIO packaging, I found that the entire structure under /etc/puppetlabs was world readable.

      There is no reason for any user to read any of this information without explicit need and I would suggest removing world read permissions.

      Attachments

        Activity

          People

            Unassigned Unassigned
            peiriannydd Trevor Vaughan
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:

              Zendesk Support