Jira (PUP-9337) Puppet sets permissions for Puppet files every run

[Kerry Halpin (JIRA)]

Title: Message Title

Kerry Halpin commented on PUP-9337   Re: Puppet sets permissions for Puppet files every run I have noticed that the file resource mode attribute is trying to add a local 'NONE' group that has a SID of S-1-5-21-<domain identifier which does not match ours>-513, which is the Domain Users SID of some unknown domain. I'm thinking this was supposed to dynamically map to our domain's "Domain Users" group, but a static value was left in it. Somehow, probably coincidence, I think Windows also has a "feature" that translates a hard-coded domain SID as 'None' when the SID does not match a known domain. Is the agent setting the mode via an explicit DACL configuration, e.g. using ICACLS? Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.