only touch the known_hosts file if it does not exist, and create the parent directory...

if more than one level of enclosing directory does not exist, this will fail cryptically.

diff --git a/src/share/common b/src/share/common
index 8e2232d659350558e472bd5f37c365d050317b8d..c10e71b5c3f87485ef9e64966db50a3af8948a8d 100644 (file)
--- a/src/share/common
+++ b/src/share/common
@@ -896,7 +896,10 @@ update_known_hosts() {
 
     # touch the known_hosts file so that the file permission check
     # below won't fail upon not finding the file
-    (umask 0022 && touch "$KNOWN_HOSTS")
+    if [ ! -f "$KNOWN_HOSTS" ]; then
+       [ -d $(dirname "$KNOWN_HOSTS") ] || mkdir -m 0700 $(dirname "$KNOWN_HOSTS")
+       touch "$KNOWN_HOSTS"
+    fi
 
     # check permissions on the known_hosts file path
     check_key_file_permissions $(whoami) "$KNOWN_HOSTS" || failure