Jira (PUP-5491) The "client_data" Directory Permissions Incorrect After Installation

[Ryan Gard (JIRA)]

Title: Message Title

Ryan Gard updated an issue   Puppet / PUP-5491 The "client_data" Directory Permissions Incorrect After Installation Change By: Ryan Gard h1. Description If a user runs  installs  the Puppet Agent  on a Windows node  and allows the service to start  after  initial registration  installation  the ACE  for SYSTEM is changed  on the "client_data" directory will be incorrect : {noformat}C:\ProgramData\PuppetLabs\puppet>icacls.exe cache\client_data cache\client_data BUILTIN\Administrators:(F)                   NT AUTHORITY\SYSTEM:(RX)                   Everyone:(Rc,S,RA)                   CREATOR OWNER:(CI)(IO)(F)                   CREATOR GROUP:(CI)(IO)(RX)                   CREATOR OWNER:(OI)(IO)(R,W,D,WDAC,WO,DC)                   CREATOR GROUP:(OI)(IO)(R) Successfully processed 1 files; Failed processing 0 files{noformat} *Note*: This assumes that the "puppet" server does not actually exist. This would happen in the situation where a user will interactively install the MSI and leave the default "puppet" server name. After the installation the user would have to manually update the "puppet.conf" to point to the correct master server. h2. Attachments * None h2. Repro Steps # Open a console and install the [Puppet Agent|http://builds.puppetlabs.lan/puppet-agent/9c0a93a43b597dca2ce14485b635389b3dfbbeca/artifacts/windows/] onto the SUT (*Note*: The service is *NOT* disabled when the agent is installed): {noformat}msiexec.exe /i puppet-agent-1.2.7.421.g9c0a93a-x64.msi /qn /L*V C:\Windows\TEMP\install-puppet.log{noformat} # Get the ACL for the "C:\ProgramData\PuppetLabs\puppet\cache\client_data" directory: {noformat}cd C:\ProgramData\PuppetLabs\puppet icacls.exe cache\client_data {noformat} h2. Expect The ACE for SYSTEM should be full control. h2. Actual The ACE for SYSTEM is only RX: {noformat}C:\ProgramData\PuppetLabs\puppet>icacls.exe cache\client_data cache\client_data BUILTIN\Administrators:(F)                   NT AUTHORITY\SYSTEM:(RX)                   Everyone:(Rc,S,RA)                   CREATOR OWNER:(CI)(IO)(F)                   CREATOR GROUP:(CI)(IO)(RX)                   CREATOR OWNER:(OI)(IO)(R,W,D,WDAC,WO,DC)                   CREATOR GROUP:(OI)(IO)(R) Successfully processed 1 files; Failed processing 0 files{noformat} Add Comment   This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.