Do not give 777 permissions to a file

Docs > Datadog Security > Code Security > Static Code Analysis (SAST) > SAST Rules > Do not give 777 permissions to a file

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Metadata

ID: typescript-node-security/chmod-permissions

Language: TypeScript

Severity: Warning

Category: Security

CWE: 732

Description

Always make sure you restrict the permissions of your application files. Applications should not allow write and execution for other users, as it may leak data and information. Always restrict the number of users and applications that can access your application data.

Non-Compliant Code Examples

const fs = require('fs');
const fsPromises = fs.promises;

fs.chmodSync("/tmp/myfile", 0o777);
fsPromises.chmod("/tmp/fsPromises", 0o777);

Compliant Code Examples

const fs = require('fs');
const fsPromises = fs.promises;

fs.chmodSync(myPath, 0o770);
fsPromises.chmod("/tmp/fsPromises", 0o770);