Re: [Pkg-puppet-devel] Wheezy update of puppet?
On Tue, 27 Jun 2017 14:35:09 -0400
Antoine Beaupré <anarcat@orangeseeds.org> wrote:
> On 2017-06-27 21:17:33, Apollon Oikonomopoulos wrote:
> > On 20:08 Tue 27 Jun , Guido Günther wrote:
> >> That sounds good to me especially if it's possible to toggle this so
> >> one
> >> can e.g. first update all clients then disable accepting YAML on the
> >> server.
> >
> > My thoughts exactly, it will be great if there's a configuration option
> > for turning off YAML.
>
> Unfortunately, this is completely hardcoded in the source code, even in
> newer releases. I would think it unwise to allow such a configuration in
> wheezy since it would be ignored in later release.
How about introducing a second package that provides the same as puppet but without YAML? It would not break the configuration later on and people can choose to install the old package with higher security.
>
> Basically, once you update the clients to the new version, you turn off
> YAML. :) PSON works with an unpatched server, so that's your
> "configuration option"...
>
> A.
>
> --
> If I can't dance, I don't want to be part of your revolution.
> - Emma Goldman
>
--
Jens Korte <korte@mailbox.org>
Reply to: