[Pkg-puppet-devel] [SCM] Puppet packaging for Debian branch, master, updated. debian/0.25.4-2-2-g363dfe7

Micah Anderson micah at riseup.net
Mon Mar 15 22:05:52 UTC 2010


The following commit has been merged in the master branch:
commit 363dfe7054975f6df038528ec88dc143f8cd5ec0
Author: Micah Anderson <micah at riseup.net>
Date:   Mon Mar 15 18:05:43 2010 -0400

    disable pluginsync=true by default in puppet.conf

diff --git a/debian/changelog b/debian/changelog
index b865174..70d0efa 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,9 +1,13 @@
 puppet (0.25.4-3) UNRELEASED; urgency=low
 
+  [ Stig Sandbeck Mathisen ]
   * Fix "puppetmaster and puppet scripts always return 0" with patch from
     Mathias Gug, make sure return codes are actually used (Closes: #573473)
 
- -- Stig Sandbeck Mathisen <ssm at debian.org>  Fri, 12 Mar 2010 12:18:43 +0100
+  [ Micah Anderson ]
+  * Disable default puppet.conf option pluginsync=true, see puppet-common.NEWS
+
+ -- Micah Anderson <micah at debian.org>  Mon, 15 Mar 2010 18:04:17 -0400
 
 puppet (0.25.4-2) unstable; urgency=low
 
diff --git a/debian/puppet-common.NEWS b/debian/puppet-common.NEWS
index 8535d73..107ea64 100644
--- a/debian/puppet-common.NEWS
+++ b/debian/puppet-common.NEWS
@@ -1,3 +1,16 @@
+puppet (0.25.4-3) unstable; urgency=low
+
+  The pluginsync=true option is no longer set in the default puppet.conf
+  that is distributed with the package. There is a spurious error that
+  is thrown when this is enabled, and you have no plugins. Most people
+  will eventually want this enabled, however for a new puppet installation
+  it tends to scare people. Given the security implications of pluginsync
+  (it can append to anything in RUBYLIB, not just puppet/facter related
+  things), it is better to have it off by default, and let you decide
+  when you want it enabled.
+
+ -- Micah Anderson <micah at debian.org>  Mon, 15 Mar 2010 18:01:15 -0400
+
 puppet (0.25.4-2) unstable; urgency=low
 
   The default location of the puppet template directory has been moved to
diff --git a/debian/puppet.conf b/debian/puppet.conf
index 4669fd5..681969c 100644
--- a/debian/puppet.conf
+++ b/debian/puppet.conf
@@ -4,5 +4,4 @@ vardir=/var/lib/puppet
 ssldir=/var/lib/puppet/ssl
 rundir=/var/run/puppet
 factpath=$vardir/lib/facter
-pluginsync=true
 templatedir=$confdir/templates

-- 
Puppet packaging for Debian



More information about the Pkg-puppet-devel mailing list