Page Information

Title:	FIO15-C. Ensure that file operations are performed in a secure directory
Author:	Alex Volkovitsky	Jun 19, 2008
Last Changed by:	David Svoboda	May 20, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/BtYxBQ
Export As:	Word · PDF

SEI CERT Perl Coding Standard (1)     Page: FIO01-PL. Do not operate on files that can be modified by untrusted users

Android (1)     Page: Unknown Applicability (C Rules/Recomendations)

SEI CERT C Coding Standard (7)     Page: FIO06-C. Create files with appropriate access permissions     Page: FIO21-C. Do not create temporary files in shared directories     Page: FIO32-C. Do not perform operations on devices that are only appropriate for files     Page: FIO45-C. Avoid TOCTOU race conditions while accessing files     Page: FIO01-C. Be careful using functions that use file names for identification     Page: FIO10-C. Take care when using the rename() function     Page: FIO05-C. Identify files using multiple file attributes

Parent Page     Page: Rec. 09. Input Output (FIO)

• fio
• android-unknown
• unenforceable
• recommendation

Time	Editor
May 20, 2025 08:19	Will Snavely	View Changes
REM Cost Reform
Nov 16, 2017 14:41	Will Snavely	View Changes
Mar 31, 2015 23:43	Will Snavely	View Changes
Mar 30, 2015 16:30	Will Snavely	View Changes
Mar 27, 2014 15:31	David Svoboda

External Links (8)
    https://www.securecoding.cert.org/confluence/display/seccod…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/
    cwe.mitre.org/data/definitions/379.html
    cwe.mitre.org/data/definitions/552.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT C++ Coding Standard (2)     Page: VOID FIO15-CPP. Ensure that file operations are performed in a secure directory     Home page: SEI CERT C++ Coding Standard

SEI CERT C Coding Standard (5)     Page: FIO02-C. Canonicalize path names originating from tainted sources     Page: FIO01-C. Be careful using functions that use file names for identification     Page: AA. Bibliography     Home page: SEI CERT C Coding Standard     Page: BB. Definitions