When a user runs puppet apply -e 'notice foo' immediately after installing puppet-agent and before installing puppetserver the permissions on /var/log/puppetlabs are silently changed from root:root 0755 to root:root 0750.
This is a problem because once puppetserver is installed, it cannot start the service because it cannot traverse through /var/log/puppetlabs into /var/log/puppetlabs/puppetserver.
:rundir is 0755 in defaults.rb which is why we don't see this here.
We also don't see this in our testing because we don't run puppet in the space between installing puppet-agent and puppetserver.
probability: medium (only local logfile)
severity: medium (error, with work-around)
test layer: acceptance, (package creates file/sets permissions)