security

Documentation

Index

• func EnforceFilePermissions(path string, mode os.FileMode) error
• type PermissionFinding
  • func AuditProjectPermissions(projectDir string) ([]PermissionFinding, error)

Functions

func EnforceFilePermissions

func EnforceFilePermissions(path string, mode os.FileMode) error

EnforceFilePermissions sets path to the given mode via os.Chmod. Returns an error if the file does not exist or chmod fails.

Types

type PermissionFinding

type PermissionFinding struct {
	Path         string
	CurrentMode  os.FileMode
	RequiredMode os.FileMode
	Reason       string
}

PermissionFinding describes a file whose current permissions differ from what the security policy requires.

func AuditProjectPermissions

func AuditProjectPermissions(projectDir string) ([]PermissionFinding, error)

AuditProjectPermissions walks projectDir and checks each file against the sensitivePatterns map. Files whose current mode is more permissive than required are reported as PermissionFinding values.

Directories are skipped; only regular files are evaluated.