telmich/cdist — pull request #58 by asteven (2012-04-30 12:50:10+00:00)
Title: set safe permissions on remote base_dir (/var/lib/cdist)

currently:
# ls -ald /var/lib/cdist
drwxr-xr-x 4 root root 96 Apr 25 17:16 /var/lib/cdist

with this patch:
# ls -ald /var/lib/cdist
drwx------ 4 root root 4096 2012-04-30 14:41 /var/lib/cdist

I believe we already fixed this in the 'cdist-pure-shell' days, but it seems we missed it while porting to python. I would consider this a severe issue. Maybe you should deploy and announce a security bugfix release after merging.

Signed-off-by: Steven Armstrong