salt/doc/topics/releases/0.16.2.rst

=========================
Salt 0.16.2 Release Notes
=========================

Version 0.16.2 is a bugfix release for :doc:`0.16.0 </topics/releases/0.16.0>`,
and contains a number of fixes.

Windows
-------

- Only allow Administrator's group and SYSTEM user access to C:\\salt. This
  eliminates a race condition where a non-admin user could modify a template or
  managed file before it is executed by the minion (which is running as an
  elevated user), thus avoiding a potential escalation of privileges. (:issue:`6361`)


Grains
------
- Fixed detection of ``virtual`` grain on OpenVZ hardware nodes
- Gracefully handle lsb_release data when it is enclosed in quotes
- Improved grains detection on MacOS

Pillar
------
- Don't try to load :doc:`git_pillar </ref/pillar/all/salt.pillar.git_pillar>`
  if not enabled in master config (:issue:`6052`)
- Functions :mod:`pillar.item <salt.modules.pillar.item>` and
  :mod:`pillar.items <salt.modules.pillar.items>` added for parity with
  :mod:`grains.item <salt.modules.grains.item>`/:mod:`grains.items
  <salt.modules.grains.items>`. The old function ``pillar.data`` is preserved
  for backwards compatibility.
- Fixed minion traceback when Pillar SLS is malformed (:issue:`5910`)


Peer Publishing
---------------
- More gracefully handle improperly quoted publish commands (:issue:`5958`)
- Fixed traceback when timeout specified via the CLI fo :mod:`publish.publish
  <salt.modules.publish.publish>`, :mod:`publish.full_data
  <salt.modules.publish.full_data>` (:issue:`5959`)
- Fixed unintended change in output of :mod:`publish.publish
  <salt.modules.publish.publish>` (:issue:`5928`)


Minion
------
- Fixed salt-key usage in minionswarm script
- Quieted warning about :strong:`SALT_MINION_CONFIG` environment variable on
  minion startup and for CLI commands run via ``salt-call`` (:issue:`5956`)
- Added minion config parameter :conf_minion:`random_reauth_delay` to stagger
  re-auth attempts when the minion is waiting for the master to approve its
  public key. This helps prevent SYN flooding in larger environments.


User/Group Management
---------------------
- Implement previously-ignored ``unique`` option for :mod:`user.present
  <salt.states.user.present>` states in FreeBSD
- Report in state output when a :mod:`group.present
  <salt.states.group.present>` state attempts to use a gid in use by another
  group
- Fixed regression that prevents a :mod:`user.present
  <salt.states.user.present>` state to set the password hash to the system
  default (i.e. an unset password)
- Fixed multiple :mod:`group.present <salt.states.group.present>` states with
  the same group (:issue:`6439`)


File Management
---------------
- Fixed file.mkdir setting incorrect permissions (:issue:`6033`)
- Fixed cleanup of source files for templates when ``/tmp`` is in file_roots
  (:issue:`6118`)
- Fixed caching of zero-byte files when a non-empty file was previously cached
  at the same path
- Added HTTP authentication support to the cp module (:issue:`5641`)
- Diffs are now suppressed when binary files are changed


Package/Repository Management
-----------------------------
- Fixed traceback when there is only one target for :mod:`pkg.latest
  <salt.states.pkg.latest>` states
- Fixed regression in detection of virtual packages (apt)
- Limit number of pkg database refreshes to once per :mod:`state.sls
  <salt.modules.state.sls>`/:mod:`state.highstate
  <salt.modules.state.highstate>`
- YUM: Allow 32-bit packages with arches other than i686 to be managed on
  64-bit systems (:issue:`6299`)
- Fixed incorrect reporting in pkgrepo.managed states (:issue:`5517`)
- Fixed 32-bit binary package installs on 64-bit RHEL-based distros, and added
  proper support for 32-bit packages on 64-bit Debian-based distros
  (:issue:`6303`)
- Fixed issue where requisites were inadvertently being put into YUM repo files
  (:issue:`6471`)


Service Management
------------------
- Fixed inaccurate reporting of results in :mod:`service.running
  <salt.states.service.running>` states when the service fails to start
  (:issue:`5894`)
- Fixed handling of custom initscripts in RHEL-based distros so that they are
  immediately available, negating the need for a second state run to manage the
  service that the initscript controls


Networking
----------
- Function network.hwaddr renamed to :mod:`network.hw_addr
  <salt.modules.network.hw_addr>` to match :mod:`network.ip_addrs
  <salt.modules.network.ip_addrs>` and :mod:`network.ip_addrs6
  <salt.modules.network.ip_addrs6>`. All three functions also now work without
  the underscore in the name, as well.
- Fixed traceback in :mod:`bridge.show <salt.modules.bridge.show>` when
  interface is not present (:issue:`6326`)


SSH
---
- Fixed incorrect result reporting for some :mod:`ssh_known_hosts.present
  <salt.states.ssh_known_hosts.present>` states
- Fixed inaccurate reporting when :mod:`ssh_auth.present
  <salt.states.ssh_auth.present>` states are run with ``test=True``, when
  rsa/dss is used for the ``enc`` param instead of ssh-rsa/ssh-dss
  (:issue:`5374`)


pip
---
- Properly handle ``-f`` lines in pip freeze output
- Fixed regression in pip.installed states with specifying a requirements file
  (:issue:`6003`)
- Fixed use of ``editable`` argument in :mod:`pip.installed
  <salt.states.pip.installed>` states (:issue:`6025`)
- Deprecated ``runas`` parameter in execution function calls, in favor of
  ``user``


MySQL
-----
- Allow specification of :doc:`MySQL </ref/modules/all/salt.modules.mysql>`
  connection arguments via the CLI, overriding/bypassing minion config params
- Allow :mod:`mysql_user.present <salt.states.mysql_user.present>` states to
  set a passwordless login (:issue:`5550`)
- Fixed endless loop when :mod:`mysql.processlist
  <salt.modules.mysql.processlist>` is run (:issue:`6297`)


PostgreSQL
----------
- Fixed traceback in :mod:`postgres.user_list
  <salt.modules.postgres.user_list>` (:issue:`6352`)


Miscellaneous
-------------
- Don't allow :doc:`npm states </ref/states/all/salt.states.npm>` to be used if
  :doc:`npm module </ref/modules/all/salt.modules.npm>` is not available
- Fixed :mod:`alternatives.install <salt.states.alternatives.install>` states
  for which the target is a symlink (:issue:`6162`)
- Fixed traceback in :doc:`sysbench module
  </ref/modules/all/salt.modules.sysbench>` (:issue:`6175`)
- Fixed traceback in job cache
- Fixed tempfile cleanup for windows
- Fixed issue where SLS files using the :doc:`pydsl renderer
  </ref/renderers/all/salt.renderers.pydsl>` were not being run
- Fixed issue where returners were being passed incorrect information
  (:issue:`5518`)
- Fixed traceback when numeric args are passed to :mod:`cmd.script
  <salt.states.cmd.script>` states
- Fixed bug causing :mod:`cp.get_dir <salt.modules.cp.get_dir>` to return more
  directories than expected (:issue:`6048`)
- Fixed traceback when :mod:`supervisord.running
  <salt.states.supervisord.running>` states are run with ``test=True``
  (:issue:`6053`)
- Fixed tracebacks when Salt encounters problems running rbenv (:issue:`5888`)
- Only make the :doc:`monit module </ref/modules/all/salt.modules.monit>`
  available if monit binary is present (:issue:`5871`)
- Fixed incorrect behavior of :mod:`img.mount_image
  <salt.modules.img.mount_image>`
- Fixed traceback in :mod:`tomcat.deploy_war <salt.modules.tomcat.deploy_war>`
  in Windows
- Don't re-write /etc/fstab if mount fails
- Fixed tracebacks when Salt encounters problems running gem (:issue:`5886`)
- Fixed incorrect behavior of :mod:`selinux.boolean
  <salt.states.selinux.boolean>` states (:issue:`5912`)
- :doc:`RabbitMQ </ref/modules/all/salt.modules.rabbitmq>`: Quote passwords to
  avoid symbols being interpolated by the shell (:issue:`6338`)
- Fixed tracebacks in :mod:`extfs.mkfs <salt.modules.extfs.mkfs>` and
  :mod:`extfs.tune <salt.modules.extfs.tune>` (:issue:`6462`)
- Fixed a regression with the :mod:`module.run <salt.states.module.run>` state
  where the ``m_name`` and ``m_fun`` arguments were being ignored (:issue:`6464`)