docs(run-sheet): check config directory ancestors before accounts init (#1873) #1922

2026-11-11T05:43:56Z

jason.woltje commented

2026-11-11 05:43:56 +00:00

Run sheet follow-up to #1919 (#1873).

Since #1919, mosaic accounts init refuses accounts-unsafe when any folder above the config directory is not root's or the stack user's, or is group or other writable without the sticky bit. Step 3 of the SSO migration now says so and gives a read-only stat loop to run first, so a host with a group-writable .config finds out before the live step, not at it.

Doc only. No test reads this text (stack-upgrade.test.mjs names the file path only).

Run sheet follow-up to #1919 (#1873). Since #1919, `mosaic accounts init` refuses `accounts-unsafe` when any folder above the config directory is not root's or the stack user's, or is group or other writable without the sticky bit. Step 3 of the SSO migration now says so and gives a read-only `stat` loop to run first, so a host with a group-writable `.config` finds out before the live step, not at it. Doc only. No test reads this text (`stack-upgrade.test.mjs` names the file path only).

jason.woltje added 1 commit 2026-11-11 05:43:57 +00:00

docs(run-sheet): check config directory ancestors before accounts init (#1873 ) 6415e81ee7

mosaic accounts init refuses accounts-unsafe since #1919 when a folder above the
config directory is writable by another user. Step 3 now gives the read-only check.

jason.woltje merged commit 6415e81ee7 into refactor

2026-11-11 05:43:59 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: mosaicstack/stack#1922