File/folder permissions checks

PowerShell / DSC

This repo is for the DSC v3 project

MIT License

133 stars 22 forks source link

File/folder permissions checks #427

Open SteveL-MSFT opened 2 months ago

SteveL-MSFT commented 2 months ago

Summary of the new feature / enhancement

Anywhere that dsc reads a file, we should check that the file and it's containing directory isn't world writable. If so, we should error and not allow as it is not trusted.

Proposed technical implementation details (optional)

No response

anmenaga commented 2 months ago

Probably, such strict mode should be opt-in. Otherwise users, who just want to run their configs, will be getting a lot of roadblocks.

SteveL-MSFT commented 1 month ago

We can have it opt-out