Jira (PUP-5491) The "client_data" Directory Permissions Incorrect After Installation

Title: Message Title

Ryan Gard commented on

PUP-5491

Alternate Scenario

Ethan Brown here is another reproduction of the issue.

PE Version: 2015.2.3
Master OS: CentOS 7 x64
Agent OS: Windows 2012 R2 x64 (SUT)

Open a console and install the Puppet Agent onto the SUT (Note: The service is NOT disabled when the agent is installed):

msiexec.exe /i puppet-agent-1.2.7.421.g9c0a93a-x64.msi /qn /L*V C:\Windows\TEMP\install-puppet.log

Run the Puppet Agent on the SUT:

puppet agent -t --server=centos7.vm --certname=w2012r2.vm

Sign the the cert on the master:

puppet cert sign --all

Run the Puppet Agent on the SUT:

puppet agent -t --server=centos7.vm --certname=w2012r2.vm

Get the ACL for the "C:\ProgramData\PuppetLabs\puppet\cache\client_data\catalog" directory:

cd C:\ProgramData\PuppetLabs\puppet

icacls.exe cache\client_data\catalog

The ACE for SYSTEM should be full control.

The ACE for SYSTEM is missing:

C:\ProgramData\PuppetLabs\puppet>icacls.exe cache\client_data\catalog

cache\client_data\catalog BUILTIN\Administrators:(I)(F)

                          CREATOR OWNER:(I)(CI)(IO)(F)

                          W2012R2\None:(I)(RX)

                          CREATOR GROUP:(I)(CI)(IO)(RX)

                          CREATOR OWNER:(I)(OI)(IO)(R,W,D,WDAC,WO,DC)

                          CREATOR GROUP:(I)(OI)(IO)(R)

Successfully processed 1 files; Failed processing 0 files

Add Comment

This message was sent by Atlassian JIRA

--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.