Jira (PUP-6494) exec resources leak the command string when execution fails

[John Duarte (JIRA)]

Title: Message Title

John Duarte commented on PUP-6494   Re: exec resources leak the command string when execution fails This passes on Ubuntu 16.04 amd64 using puppet-agent at sha 4a671ea6829e987be83ab0934389940ce68724a1 containing puppet at sha ad6df55a248a9fdf19afdce42a00eea7adeeae45. An exec resource that has been defined as Sensitive will be redacted from the catalog execution output if it fails. Output: root@p7l7p03h0rd5gwr:~# cat sensitive_exec.pp exec { 'sensitive_false': command => Sensitive.new("/bin/false TOPSECRET"), } exec { 'sensitive_true': command => Sensitive.new("/bin/true TOPSECRET"), } root@p7l7p03h0rd5gwr:~# puppet apply sensitive_exec.pp Notice: Compiled catalog for p7l7p03h0rd5gwr.delivery.puppetlabs.net in environment production in 0.13 seconds Error: [command redacted] returned 1 instead of one of [0] Error: /Stage[main]/Main/Exec[sensitive_false]/returns: change from notrun to 0 failed: [command redacted] returned 1 instead of one of [0] Notice: /Stage[main]/Main/Exec[sensitive_true]/returns: executed successfully Notice: Applied catalog in 0.04 seconds Add Comment   This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.