2023-11-25 22:51:38 +00:00
|
|
|
package testutils
|
|
|
|
|
|
|
|
import "github.com/securego/gosec/v2"
|
|
|
|
|
2023-12-08 13:30:54 +00:00
|
|
|
// SampleCodeG302 - file create / chmod permissions check
|
|
|
|
var SampleCodeG302 = []CodeSample{
|
|
|
|
{[]string{`
|
2023-11-25 22:51:38 +00:00
|
|
|
package main
|
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
|
|
|
"os"
|
|
|
|
)
|
|
|
|
|
|
|
|
func main() {
|
|
|
|
err := os.Chmod("/tmp/somefile", 0777)
|
|
|
|
if err != nil {
|
|
|
|
fmt.Println("Error when changing file permissions!")
|
|
|
|
return
|
|
|
|
}
|
|
|
|
}
|
|
|
|
`}, 1, gosec.NewConfig()},
|
2023-12-08 13:30:54 +00:00
|
|
|
{[]string{`
|
2023-11-25 22:51:38 +00:00
|
|
|
package main
|
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
|
|
|
"os"
|
|
|
|
)
|
|
|
|
|
|
|
|
func main() {
|
|
|
|
_, err := os.OpenFile("/tmp/thing", os.O_CREATE|os.O_WRONLY, 0666)
|
|
|
|
if err != nil {
|
|
|
|
fmt.Println("Error opening a file!")
|
|
|
|
return
|
|
|
|
}
|
|
|
|
}
|
|
|
|
`}, 1, gosec.NewConfig()},
|
2023-12-08 13:30:54 +00:00
|
|
|
{[]string{`
|
2023-11-25 22:51:38 +00:00
|
|
|
package main
|
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
|
|
|
"os"
|
|
|
|
)
|
|
|
|
|
|
|
|
func main() {
|
|
|
|
err := os.Chmod("/tmp/mydir", 0400)
|
|
|
|
if err != nil {
|
|
|
|
fmt.Println("Error")
|
|
|
|
return
|
|
|
|
}
|
|
|
|
}
|
|
|
|
`}, 0, gosec.NewConfig()},
|
2023-12-08 13:30:54 +00:00
|
|
|
{[]string{`
|
2023-11-25 22:51:38 +00:00
|
|
|
package main
|
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
|
|
|
"os"
|
|
|
|
)
|
|
|
|
|
|
|
|
func main() {
|
|
|
|
_, err := os.OpenFile("/tmp/thing", os.O_CREATE|os.O_WRONLY, 0600)
|
|
|
|
if err != nil {
|
|
|
|
fmt.Println("Error opening a file!")
|
|
|
|
return
|
|
|
|
}
|
|
|
|
}
|
|
|
|
`}, 0, gosec.NewConfig()},
|
2023-12-08 13:30:54 +00:00
|
|
|
}
|