Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: FIO01-EX0 rearranged, and link to FIO03-J changed to FIO00-J, where the definition of secure directories exists.

...

FIO01-EX0: If a file is created inside a directory that is both secure and unreadable by untrusted users, then that file may be created with the default access permissions. See FIO03-J. Remove temporary files before termination for the definition of a secure directory. This could be the case if, for example, the entire file system is trusted, or is accessible only to trusted users. See FIO00-J. Do not operate on files in shared directories for the definition of a secure directory.

FIO01-EX1: Files that do not contain sensitive information need not be created with specific access permissions.

...

CERT C++ Secure Coding Standard

FIO06-CPP. Create files with appropriate access permissions

CERT C Secure Coding Standard

FIO06-C. Create files with appropriate access permissions

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="bcc2f96fcdcdd3f3-15bb4c35-438f41c4-bdfb93c6-ed41fdb075fb9727244f86e4"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

"Missing or Inconsistent Access Control [XZN]"

]]></ac:plain-text-body></ac:structured-macro>

MITRE CWE

CWE-279. Incorrect Execution-Assigned Permissions

 

CWE-276. Incorrect Default Permissions

 

CWE-732. Incorrect Permission Assignment for Critical Resource

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="937b7419db89ddac-f76c4cb4-45544f6d-a14bbd03-c7835d89d78220525af7aecb"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="b9efc7e12b04c4fa-3df9e22c-43ad4b14-a0c08151-0d7fd863f34001300e479b40"><ac:plain-text-body><![CDATA[

[[CVE

AA. Bibliography#CVE]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="4685ecd1093d4d09-a2ea78c9-428f4865-9a3a9076-07102776474016b2dc16b3d1"><ac:plain-text-body><![CDATA[

[[Dowd 2006

AA. Bibliography#Dowd 06]]

Chapter 9, "UNIX 1: Privileges and Files"

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="18728d521f334b77-e41f5cd9-41a643be-83ec8898-b8b3035b270258320c200ef6"><ac:plain-text-body><![CDATA[

[[J2SE 2011

AA. Bibliography#J2SE 11]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="24d7ee204d85500a-6fcfb4fc-40fd41ed-809c9e61-59753faa7dff84b02dea613a"><ac:plain-text-body><![CDATA[

[[OpenBSD

AA. Bibliography#OpenBSD]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="cc9f14c6ce230a61-89e000a3-49854ef3-8bb49aef-aabd528223c181690b2480f1"><ac:plain-text-body><![CDATA[

[[Open Group 2004

AA. Bibliography#Open Group 04]]

"The open function," and "The umask function"

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="b8202cd37ab941d6-58016b99-496a4843-b508bb84-5d82651240356ca5eda1c788"><ac:plain-text-body><![CDATA[

[[Viega 2003

AA. Bibliography#Viega 03]]

Section 2.7, "Restricting Access Permissions for New Files on UNIX"

]]></ac:plain-text-body></ac:structured-macro>

...