SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 45

changes.mady.by.user Shannon Haas

Saved on

compared with

New Version 46

changes.mady.by.user Shannon Haas

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

FIO01-EX0: When a file is created inside a directory that is both secure and unreadable by untrusted users, that file may be created with the default access permissions. This could be the case if, for example, the entire file system is trusted or is accessible only to trusted users. See rule FIO00-J. Do not operate on files in shared directories for the definition of a secure directory.

...

CERT C++ Secure Coding Standard

FIO06-CPP. Create files with appropriate access permissions

CERT C Secure Coding Standard

FIO06-C. Create files with appropriate access permissions

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="fcc485259da08ed6-fd47292d-48ee4d0d-8ef1a9c2-3bab7da4d8e422f8bf1047d1"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

Missing or Inconsistent Access Control [XZN]

]]></ac:plain-text-body></ac:structured-macro>

MITRE CWE

CWE-279. Incorrect execution-assigned permissions

 

CWE-276. Incorrect default permissions

 

CWE-732. Incorrect permission assignment for critical resource

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a781075376ba020e-5f7f2577-40a9497a-bc14b06b-50020a7f156aa9c4dad583e4"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="de25cc535adc6184-799b45b2-47584937-a80ebe72-f4bf12b3d8a14c736d418d0a"><ac:plain-text-body><![CDATA[

[[CVE

AA. Bibliography#CVE]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="25819021c28b9148-29f79b56-466a4ace-bcd185ef-87b940831fcb7e05139fd7e7"><ac:plain-text-body><![CDATA[

[[Dowd 2006

AA. Bibliography#Dowd 06]]

Chapter 9, "UNIX 1: Privileges and Files"

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="03130a19f53da6a0-46a5fb18-490a4321-8e089f0c-fcb4386f0e4310a47217d1ad"><ac:plain-text-body><![CDATA[

[[J2SE 2011

AA. Bibliography#J2SE 11]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e6daeaac729f2d51-09c929c2-45d245e6-85e08ca0-ba0c9a25d1b2a18d5d2f7c78"><ac:plain-text-body><![CDATA[

[[OpenBSD

AA. Bibliography#OpenBSD]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="433bf4251be3b15a-fba8417d-4ce24cbe-8d1eabb4-07e19b6bcb660cbfba55c031"><ac:plain-text-body><![CDATA[

[[Open Group 2004

AA. Bibliography#Open Group 04]]

"The open function," and "The umask function"

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="7c91698e605578fb-8e5e063e-47ed417e-b04b88c3-696dbb3c4aa40ac77668b250"><ac:plain-text-body><![CDATA[

[[Viega 2003

AA. Bibliography#Viega 03]]

Section 2.7, "Restricting Access Permissions for New Files on UNIX"

]]></ac:plain-text-body></ac:structured-macro>

...