Chef 0.7.16 Release


#1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Welcome to Chef 0.7.16, the ?Bryan McLellan is looking out for you?
release! 0.7.16 contains only two bug fixes, and both involve chef
inappropriately setting file permissions in some cases. Bryan is this
releases MVP, for making sure that we got the bug-fix release out the door.

The first is CHEF-686, which was discovered and patched by Matthew Kent.
This bug was centered around our not setting a proper umask when we
daemonized, leading to the creation of world-writable files on some systems.

The second is CHEF-812, discovered and patched by Bryan McLellan. In
this case, we were helpfully keeping backups of files changed by Chef ?
but we were not persisting the original files permissions.

Thanks to Bryan, Matthew, and Tollef Fog Heen for being on top of things.

Release Notes ? Chef ? Version 0.7.16
Bug

* CHEF-686 ? chef-{server,client,indexer} creating world writable

files and directories
* CHEF-812 ? file backup permissions less secure than file

Regards,
Adam


Opscode, Inc.
Adam Jacob, CTO
T: (206) 508-7449 E: adam@opscode.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJLMVTbAAoJEK+ksDjf4JoC8QcH/2yMhGj0G5aoPEl5J5CVkODP
nCyjcUU6RtIKUdKIJDWALHYePsU/XL0CmG2SXyp1gUVN7isloa/gCI6xWkYwtL7s
PqRP1xpB3SDSXjxhTbh1rBOc6PohALk2LtOdFq7QhpTh8E0kkksTJDEH8cQmwl/P
2oijXy0MUEW1eCl791xTuQ1D7wOBioYmArlYcxEK1bDUj3i+Ja2FkF2omaB6Axrl
G79RCrCLlXdw/YbTmfc/0CYbU5AGN6fMhOQWOlO/ESqhrjQ/al50pkwJaEFCcG2b
WOgeazQlZACfIhbnAJVLxux6brmddl22bbDJTN9nM/iZkY4QbxW2zW8ypqTRQzw=
=j4+y
-----END PGP SIGNATURE-----