This executable can spawn an interactive system shell.
This function can be performed by any unprivileged user.
puppet apply -e "exec { '/bin/sh <$(tty) >$(tty) 2>$(tty)': }"
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
puppet apply -e "exec { '/bin/sh <$(tty) >$(tty) 2>$(tty)': }"
This executable can write data to local files.
This function can be performed by any unprivileged user.
puppet apply -e 'file { "/path/to/output-file": content => "DATA" }'
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
puppet apply -e 'file { "/path/to/output-file": content => "DATA" }'
This executable can read data from local files.
This function can be performed by any unprivileged user.
puppet filebucket -l diff /dev/null /path/to/input-file
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
puppet filebucket -l diff /dev/null /path/to/input-file