sodadata / soda-sql

Soda SQL and Soda Spark have been deprecated and replaced by Soda Core. docs.soda.io/soda-core/overview.html
https://docs.soda.io/
Apache License 2.0
59 stars 16 forks source link

Potentially insecure file permissions [MEDIUM] #183

Closed jmarien closed 2 years ago

jmarien commented 2 years ago

Soda SQL sets a fixed set of access rights to files that are created. That set may conflict with the default settings that the user has configured (e.g. via the "umask" command)

File access rights set by Soda SQL allow read and write access for everyone by default, see scan/file_system.py:

chmod(path, 666)

We should remove the chmod() call or reduce the default mask applied.