Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
PUP 5.5.10, PUP 5.5.12, PUP 5.5.14
-
RHEL 7 (x86_64)
-
Night's Watch
-
3
-
PR - 2019-06-12, PR - 2019-06-25, PR - 2019-07-10, PR - 2019-07-23, NW - 2019-08-07
-
Needs Assessment
-
Bug Fix
-
-
Needs Assessment
Description
Puppet Version: 5.5.14, 5.5.10
Puppet Server Version: 5.3.8
OS Name/Version: Windows 10 / 1809
File modes are applied on every puppet run at least if files reside in special folders like "Program Files" and "Windows". This was working in 5.5.1
Reproducible: Always, see example below
Desired Behavior:
File modes are not changed
Actual Behavior:
File modes are changed with every run (mode changed '2000644' to '0644')
Example
C:\Users\administrator>cacls C:\Windows\system32\puppet_facter_pci.ids.gz
|
C:\Windows\system32\puppet_facter_pci.ids.gz APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(special access:)
|
READ_CONTROL
|
FILE_READ_DATA
|
FILE_READ_EA
|
FILE_WRITE_EA APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(CI)(IO)(special access:)
|
GENERIC_READ BUILTIN\Administrators:(special access:)
|
STANDARD_RIGHTS_ALL
|
DELETE
|
READ_CONTROL
|
WRITE_DAC
|
WRITE_OWNER
|
SYNCHRONIZE
|
STANDARD_RIGHTS_REQUIRED
|
FILE_GENERIC_READ
|
FILE_GENERIC_WRITE
|
FILE_READ_DATA
|
FILE_WRITE_DATA
|
FILE_APPEND_DATA
|
FILE_READ_EA
|
FILE_WRITE_EA
|
FILE_READ_ATTRIBUTES
|
FILE_WRITE_ATTRIBUTES MBOX\Domain Admins:(special access:)
|
READ_CONTROL
|
SYNCHRONIZE
|
FILE_GENERIC_READ
|
FILE_READ_DATA
|
FILE_READ_EA
|
FILE_READ_ATTRIBUTES Everyone:(special access:)
|
READ_CONTROL
|
SYNCHRONIZE
|
FILE_GENERIC_READ
|
FILE_READ_DATA
|
FILE_READ_EA
|
FILE_READ_ATTRIBUTES NT AUTHORITY\SYSTEM:F
|
|
|
C:\Users\administrator>puppet apply -e "file { 'C:\Windows\system32\puppet_facter_pci.ids.gz': mode => '0644'}" |
Notice: Compiled catalog for host in environment production in 0.02 seconds |
Notice: /Stage[main]/Main/File[C:\Windows\system32\puppet_facter_pci.ids.gz]/mode: mode changed '2000644' to '0644' |
Notice: Applied catalog in 0.77 secondsC:\Users\administrator>cacls C:\Windows\system32\puppet_facter_pci.ids.gz |
C:\Windows\system32\puppet_facter_pci.ids.gz APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(special access:)
|
READ_CONTROL
|
FILE_READ_DATA
|
FILE_READ_EA
|
FILE_WRITE_EA APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(CI)(IO)(special access:)
|
GENERIC_READ BUILTIN\Administrators:(special access:)
|
STANDARD_RIGHTS_ALL
|
DELETE
|
READ_CONTROL
|
WRITE_DAC
|
WRITE_OWNER
|
SYNCHRONIZE
|
STANDARD_RIGHTS_REQUIRED
|
FILE_GENERIC_READ
|
FILE_GENERIC_WRITE
|
FILE_READ_DATA
|
FILE_WRITE_DATA
|
FILE_APPEND_DATA
|
FILE_READ_EA
|
FILE_WRITE_EA
|
FILE_READ_ATTRIBUTES
|
FILE_WRITE_ATTRIBUTES MBOX\Domain Admins:(special access:)
|
READ_CONTROL
|
SYNCHRONIZE
|
FILE_GENERIC_READ
|
FILE_READ_DATA
|
FILE_READ_EA
|
FILE_READ_ATTRIBUTES Everyone:(special access:)
|
READ_CONTROL
|
SYNCHRONIZE
|
FILE_GENERIC_READ
|
FILE_READ_DATA
|
FILE_READ_EA
|
FILE_READ_ATTRIBUTES NT AUTHORITY\SYSTEM:F
|
|
|
C:\Users\administrator>puppet apply -e "file { 'C:\Windows\system32\puppet_facter_pci.ids.gz': mode => '0644'}" |
Notice: Compiled catalog for host in environment production in 0.02 seconds |
Notice: /Stage[main]/Main/File[C:\Windows\system32\puppet_facter_pci.ids.gz]/mode: mode changed '2000644' to '0644' |
Notice: Applied catalog in 0.75 seconds |
|
