You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi Folks,
When attempting to run sts as a newly created system user with a non-skeletonized home directory, I discovered that sts assumes that ~/.cache already exists and is available to create sts-client-id.txt within.
I believe that sts should do one of the following depending on the developer's design philosophy:
Error out with a succinct and syslog-friendly single-line error message that explains that ~/.cache doesn't exist and needs to be created to allow sts to cache files, obfuscating the multi-line Go traceback.
Attempt to create the ~/.cache directory with the correct ownership and and appropriately conservative mode, probably 0700 to ensure we aren't creating a directory that STIG benchmarks would consider to be too open.
Thanks!
The text was updated successfully, but these errors were encountered:
Hi Folks,
When attempting to run sts as a newly created system user with a non-skeletonized home directory, I discovered that sts assumes that
~/.cache
already exists and is available to creatests-client-id.txt
within.Here's what I observed:
I believe that sts should do one of the following depending on the developer's design philosophy:
~/.cache
doesn't exist and needs to be created to allow sts to cache files, obfuscating the multi-line Go traceback.~/.cache
directory with the correct ownership and and appropriately conservative mode, probably 0700 to ensure we aren't creating a directory that STIG benchmarks would consider to be too open.Thanks!
The text was updated successfully, but these errors were encountered: