> Hello, Diego! > We had a quick discussion ...
# sig-security
y
Hello, Diego!
We had a quick discussion after your first email, but it was lost in time, it seems..
I’d say we should proceed with setting extract_flags in prometheus::daemon by default (I’d even set this as a default value for tar archives in the archive resource, but that’s a different story).
Could you make a PR?
Regarding existing installs.. I’m not sure how good the idea is to use
file { $extract_path: ... }
with
recurse => true
to ensure we have secure permissions even if the source archive is zip..