このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください 。
このルールを試す ID: go-security/chmod-permissions
Language: Go
Severity: Warning
Category: Security
CWE : 284
Description Granting write access to a file is a security since other users can modify the content of the file. The issue is amplified for executable files that can be easily compromised (like scripts). Avoid giving write permissions to others to files.
Learn More Non-Compliant Code Examples package main
import (
"fmt"
"os"
)
func main () {
err := os . Chmod ( "/tmp/somefile" , 0777 )
if err != nil {
fmt . Println ( "Error when changing file permissions!" )
return
}
}
package main
import (
"fmt"
"os"
)
func main () {
_ , err := os . OpenFile ( "/tmp/thing" , os . O_CREATE | os . O_WRONLY , 0666 )
if err != nil {
fmt . Println ( "Cannot create file" )
return
}
}
Compliant Code Examples package main
import (
"fmt"
"os"
)
func main () {
err := os . Chmod ( "/tmp/somefile" , 0770 )
if err != nil {
fmt . Println ( "Error when changing file permissions!" )
return
}
}
package main
import (
"fmt"
"os"
)
func main () {
_ , err := os . OpenFile ( "/tmp/thing" , os . O_CREATE | os . O_WRONLY , 0660 )
if err != nil {
fmt . Println ( "Cannot create file" )
return
}
}
Seamless integrations. Try Datadog Code Analysis