Nigel Kersten schrieb:
> On Tue, Jun 2, 2009 at 2:48 PM, Luke Kanies <l...@madstop.com> wrote:
> 
>>> * Do we still want an environment specified on the command line to be
>>> overridden by an environment fact ?
>>>   (I'm unsure about which should take precedence myself)
>> Erm, no idea?  You tell me.
> 
> I *think* that it would be more useful to be able to override your
> environment fact on the command line, primarily as I'd use this for
> testing various environments in --test mode.

+1

> I can't really see a security risk here, but I suppose people may have
> configurations where they never want their facts overriden. Anyone ?

puppetd runs as root. Callers of puppetd thus either are root themselves 
or should be treated with utmost care (i.e. having whitelists of allowed 
parameters and environment variables, like sudo does). This is a 
well-known, handleable problem.

Regards, DavidS

-- 
dasz.at OG              Tel: +43 (0)664 2602670     Web: http://dasz.at
Klosterneuburg                                         UID: ATU64260999

        FB-Nr.: FN 309285 g          FB-Gericht: LG Korneuburg

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Developers" group.
To post to this group, send email to puppet-dev@googlegroups.com
To unsubscribe from this group, send email to 
puppet-dev+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/puppet-dev?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to