wallarm / gotestwaf

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
https://lab.wallarm.com/test-your-waf-before-hackers/
MIT License
1.55k stars 212 forks source link

Error Generating Report Post Run #253

Open jeffsani opened 3 months ago

jeffsani commented 3 months ago

I reviewed some of the other errors people were seeing but did not find a solution. Tests complete successfully, but I am unable to generate a PDF or HTML report as the following error is thrown:   ERRO[0281] caught error in main function error="couldn't export full report: couldn't export report to HTML: open reports/waf-evaluation-report-2024-July-31-19-50-43.html: permission denied"

The account I am running docker under is a member of sudoers, but it seems like I am hitting some permissions issue. I am running the latest docker image. OS environment is WSL2 on Win 11.

Any ideas?

linkdd commented 3 months ago

The Docker daemon creates the folder to be mounted in the container as owned by root with the rwxr-xr-x permissions. But then the gotestwaf is executed as the user gtw in the container which do not have permission to write in that folder.

This fixes the issue for me:

$ mkdir reports
$ chmod a+w reports
$ docker run ...

But be mindful that this basically sets the permissions as rwxrwxrwx (the ugly chmod 777).