Unsafe permissions set on a file JS-D017
Setting unsafe read/write permissions: 0o777
53
54// unsafe permissions
55fs.chmodSync("/tmp/fs", 0o777);
56process.umask(0o777); 57
58/**
59 * @param country {string} name of the countrySetting unsafe read/write permissions: 0o777
52}
53
54// unsafe permissions
55fs.chmodSync("/tmp/fs", 0o777); 56process.umask(0o777);
57
58/**
Description
Setting unsafe POSIX file permissions can be insecure and can lead to unintended access to files.
In Unix, the "others" class refers to all users except the owner of the file and the members of the group assigned to this file. Granting permissions to this group of users can lead to unintended access to files.
Bad Practice
const fs = require('fs');
const process = require('process');
fs.chmodSync("/tmp/fs", 0o777); // Sensitive
// ...
})
process.umask(0o777); // Sensitive
Recommended
const fs = require('fs');
const process = require('process');
fs.chmodSync("/tmp/fs", 0o770); // Compliant
// ...
})
process.umask(0o770); // Compliant