hashgraph / hashgraph/full-stack-testing

helm executable extracted to temporary directory is globally writable.

未关闭
#965 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
Bug Pending Triage
主要语言
Java
星标
9
派生
3
PR 合并指标
30 天内没有已合并 PR

描述

### Bill of Materials or CLI Version

_No response_

### Execution Environment

JUnit Extensions

### Slf4j Logging Implementation

None

### To Reproduce

```markdown
Use helm client, inspect temporary directory with name such as `HelmSoftwareLoader4512790602684642253` containing globally writable helm executable.
```

### Describe the bug

`helm` executable is extracted as globally writable file.

### Describe the expected behavior

Extracted executable does not need to be writable, especially not be group or world.

### Whole JUnit/CLI Logs

```shell
N/A
```

### Additional Context

_No response_

贡献指南

打开贡献指南

调研方向

Locate HelmSoftwareLoader and the code that extracts the helm executable into its temporary directory. Reproduce the extraction and inspect the resulting file permissions, then verify the fix with the relevant JUnit extension tests; done means the executable is not group- or world-writable.

由索引模型根据 Issue 内容生成。

评估

技术栈
helm, java
领域
devops, security
Issue 类型
缺陷
难度
2/5
预计耗时
1-3 小时
活跃度
停滞
描述清晰度
基本清楚
新手友好度
48/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。