puppetlabs/puppetlabs-mysql — pull request #32 by justintime (2011-12-30 23:53:55+00:00)
Title: Permissions too restrictive on /etc/mysql/my.cnf

Since /etc/mysql/my.cnf contains the [client] section, normal
users need to be able to read that file. We should set 0644
on /etc/mysql/my.cnf, but use 0400 on /etc/my.cnf and
/root/.my.cnf because they contain passwords in plaintext.

I gotta run, and won't be back until Tues Jan 3rd. Let me know if I need to file a bug report -- if anyone wants to save me the trouble, I'd appreciate it :)