Poor file permissions used when creating a file or using
os.Chmod GSC-G302Expect file permissions to be 0600 or less
10
11func TestPedersonCommitment(t *testing.T) {
12 filePath := "./test.txt"
13 f, err := os.OpenFile(filePath, os.O_RDONLY, 0766)14 if nil != err {
15 log.Println(err)
16 }Expect file permissions to be 0600 or less
250}
251
252func (that *Sentence) exportSaving(path string, append string, data string) {
253 file, err := os.OpenFile(path+that.Title+append, os.O_RDWR|os.O_TRUNC|os.O_CREATE, 0766)254 if nil != err {
255 fmt.Println(err.Error())
256 returnExpect file permissions to be 0600 or less
173}
174
175func ExportToFolderFileJson(data []byte, folder string, file string) error {
176 f, err := os.OpenFile(fmt.Sprintf("%s/%s", folder, file), os.O_RDWR|os.O_TRUNC|os.O_CREATE, 0766)177 defer func(f *os.File) {
178 _ = f.Close()
179 }(f)Expect file permissions to be 0600 or less
26}
27
28func ExportToFolderFileYaml(data []byte, folder string, file string) error {
29 f, err := os.OpenFile(fmt.Sprintf("%s/%s", folder, file), os.O_RDWR|os.O_TRUNC|os.O_CREATE, 0766)30 defer func(f *os.File) {
31 _ = f.Close()
32 }(f)Expect file permissions to be 0600 or less
28}
29
30func CopyFile(origin, target string) error {
31 input, err := os.OpenFile(origin, os.O_RDONLY, 0666)32 if nil != err {
33 return err
34 }
Description
Excessive permissions granted to a file/directory. This warning is triggered whenever permission greater than 0600 is granted.
Generally, all security rules follow the principle of least privilege, except when the file being created needs to be accessed by anyone other than the user creating it.
Bad practice
package main
import (
"fmt"
"os"
)
func main() {
err := os.Chmod("/tmp/somefile", 0777)
if err != nil {
fmt.Println("Error when changing file permissions!")
return
}
}
Recommended
package main
import (
"fmt"
"os"
)
func main() {
err := os.Chmod("/tmp/mydir", 0400)
if err != nil {
fmt.Println("Error")
return
}
}