Poor file permissions used when creating a file or using
os.Chmod GSC-G302Expect file permissions to be 0600 or less
502 }
503 defer rf.Close()
504
505 f, err := os.OpenFile(localFile, os.O_WRONLY|os.O_CREATE|os.O_EXCL, 0644)506 if err != nil {
507 sc.out("get %s -> %s: %s", rpath, localFile, err)
508 returnExpect file permissions to be 0600 or less
311 return
312 }
313
314 f, err := os.OpenFile(lpath, os.O_WRONLY|os.O_CREATE|os.O_EXCL, 0644)315 if err != nil {
316 sc.out("get %s -> %s: %s", rpath, lpath, err)
317 returnExpect file permissions to be 0600 or less
184 }
185 defer rf.Close()
186
187 f, err := os.OpenFile(local, os.O_CREATE|os.O_WRONLY|os.O_EXCL, 0644)188 if err != nil {
189 return fmt.Errorf("get: local file %s: %w", local, err)
190 }
Description
Excessive permissions granted to a file/directory. This warning is triggered whenever permission greater than 0600 is granted.
Generally, all security rules follow the principle of least privilege, except when the file being created needs to be accessed by anyone other than the user creating it.
Bad practice
package main
import (
"fmt"
"os"
)
func main() {
err := os.Chmod("/tmp/somefile", 0777)
if err != nil {
fmt.Println("Error when changing file permissions!")
return
}
}
Recommended
package main
import (
"fmt"
"os"
)
func main() {
err := os.Chmod("/tmp/mydir", 0400)
if err != nil {
fmt.Println("Error")
return
}
}