search

voxpupuli / puppet-augeas

Helper for using augeas with puppet
Apache License 2.0
43 stars 82 forks source link

Ensure lenses are owned by root #29

Closed liwo closed 10 years ago

liwo commented 10 years ago

This is necessary as lenses are fetched with file via puppet urls. This leads to whoever ownes the files on the puppet master owns the files on the node. This may lead to arbitrary users owning the lenses. See http://projects.puppetlabs.com/issues/5240