Poor file permissions used when creating a file or using
os.Chmod GSC-G302Expect file permissions to be 0600 or less
419 return err
420 }
421 if info.Mode() != 0700 {
422 if err := os.Chmod(etcdDir, 0700); err != nil { 423 return err
424 }
425 }Expect file permissions to be 0600 or less
84 return nil
85 }
86 rcFileName = home + rcFileName
87 f, err := os.OpenFile(rcFileName, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0644)88 if err != nil {
89 return err
90 }
Description
Excessive permissions granted to a file/directory. This warning is triggered whenever permission greater than 0600 is granted.
Generally, all security rules follow the principle of least privilege, except when the file being created needs to be accessed by anyone other than the user creating it.
Bad practice
package main
import (
"fmt"
"os"
)
func main() {
err := os.Chmod("/tmp/somefile", 0777)
if err != nil {
fmt.Println("Error when changing file permissions!")
return
}
}
Recommended
package main
import (
"fmt"
"os"
)
func main() {
err := os.Chmod("/tmp/mydir", 0400)
if err != nil {
fmt.Println("Error")
return
}
}