Ubuntu puppet agent execution permissions

[Vladimir Nikolic]

Hello,

is it normal behaviour for puppet agent to allow execution of subcommands to all (non-privileged) users?

For example, all users on local system can disable puppet agent with command:

puppet agent --disable

Regards,

Vladimir

[Felix Frank]

Hi,

perhaps the permissions on your $vardir are too wide?

In short, no - you typically do not want any user to be able to access
the necessary information to connect to your puppet master.

Cheers,
Felix