Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-8985

manage_internal_file_permissions should default to the new packaging default

    XMLWordPrintable

Details

    • Task
    • Status: Closed
    • Normal
    • Resolution: Fixed
    • PUP 4.10.12, PUP 5.3.7, PUP 5.5.2
    • PUP 4.10.13, PUP 5.5.6
    • None
    • None
    • Windows 10 - 1803

    • Hide

      The default for manage_internal_file_permissions on windows should be false and on non-windows true

      Show
      The default for manage_internal_file_permissions on windows should be false and on non-windows true
    • Windows
    • 1
    • Windows 2018-07-11, Windows 2018-07-18, Windows 2018-07-25, Windows 2018-08-01
    • Not Needed
    • Needs Assessment

    Description

      As part of remediation of CVE-2018-6513 the manage_internal_file_permissions settings was set to false, by default, in the Windows MSI installer (https://github.com/puppetlabs/puppet-agent-private/commit/fa06ae0de48d2560cf9f553cf4fc1540943af9b5). However the puppet gem default is still set to true.

      This should not be the case and both defaults 1. should mirror each other, and 2. the "manage_internal_file_permissions = true" behaviour should be optin

      This ticket tracks the work to change this default on Windows.

      Attachments

        Issue Links

          Activity

            People

              ethan Ethan Brown
              glenn.sarti Glenn Sarti
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Zendesk Support