Puppet 2.7.19rc2 is a maintenance release candidate for Puppet in the
2.7.x series with bug fixes.
Downloads are available at:
* Source https://downloads.puppetlabs.com/puppet/puppet-2.7.19rc2.tar.gz
Windows package is available at
https://downloads.puppetlabs.com/windows/puppet-2.7.19rc2.msi
RPMs are available at https://yum.puppetlabs.com/el or /fedora
Debs are available at https://apt.puppetlabs.com
Mac package is available at
https://downloads.puppetlabs.com/mac/puppet-2.7.19rc2.dmg
See the Verifying Puppet Download section at:
https://projects.puppetlabs.com/projects/puppet/wiki/Downloading_Puppet
Please report feedback via the Puppet Labs Redmine site, using an
affected puppet version of 2.7.19rc2:
http://projects.puppetlabs.com/projects/puppet/
This release contains contributions from Andrew Parker and
Daniel Pittman.
## Puppet 2.7.19rc2 Release Notes ##
(#15471) Fix setting mode of last_run_summary
The writlock function didn''t work with setting the mode on the
last_run_summary file. This backports some of the work in commit
7d8fd144949f21eff924602c2a6b7f130f1c0b69. Specifically, the changes
from using writelock to replace_file for saving the summary file. This
builds on top of the backport of getting replace_file to work on
windows.
(#15471) Ensure non-root can read report summary
The security fix for locking down the last_run_report, which contains
sensitive information, also locked down the last_run_summary, which does
not contain sensitive information. Unfortunately this file is often used
by monitoring systems so that they can track puppet runs. Since the
agent runs as root and the monitoring systems do not, this caused the
summary to become unreadable by the monitoring systems.
This commit returns the summary to being world readable which undoes
part of the change done in fd44bf5e6d0d360f6a493d663b653c121fa83c3f
Use Win32 API atomic replace in `replace_file`
The changes to enable Windows support in `replace_file` were not actually
complete, and it didn''t work when the file didn''t exist -
because of
limitations of the emulation done on our side, rather than anything else.
Windows has a bunch of quirks, and Ruby doesn''t actually abstract
over the
underlying platform a great deal. We can use the Windows API
ReplaceFile, and
MoveFileEx, to achieve the desired behaviour though.
This adds even more conditional code inside the `replace_file` method to
handle multiple platforms - but it really isn''t very clean. Better
to get
this working now, then refactor, though.
## Puppet 2.7.19rc2 Changelog ##
Andrew Parker (2)
Ab540aa0 (#15471) Fix setting mode of last_run_summary
7c7cffe (#15471) Ensure non-root can read report summary
Daniel Pittman (1)
a257105 Use Win32 API atomic replace in `replace_file`
Moses Mendoza (1)
a619bfd Add additional commits to CHANGELOG missed in 2.7.19rc1
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.