securesauce / precli

Precaution CLI - command line static application security testing tool
https://precli.readthedocs.io/
Other
14 stars 3 forks source link

Add new rule around loose permission in os module #556

Closed ericwb closed 2 weeks ago

ericwb commented 3 weeks ago

Any usage of os.chmod and the like, the mode for the permissions for a file should be checked to ensure the permissions are not considered loose or incorrect. Incorrect in this case is using world write, group write, world execute, group execute. Care should be taken when using those.

Partially-resolves: https://github.com/securesauce/precli/issues/217