Too-permissive umask values
ID |
c.access_control.too_permissive_umask |
Severity |
low |
Resource |
Access Control |
Language |
C / C++ |
Description
The umask value $MASK is too permissive, allowing world or group write access to created files. A umask of 0 means no permissions are masked, creating files with mode 0666 (rw-rw-rw-). Use a more restrictive umask like 077 (owner only) or 027 (owner + group read).
Rationale
The umask value $MASK is too permissive, allowing world or group write access to created files. A umask of 0 means no permissions are masked, creating files with mode 0666 (rw-rw-rw-). Use a more restrictive umask like 077 (owner only) or 027 (owner + group read).
Remediation
Follow secure coding practices and review the references below for detailed remediation guidance.