hashgraph / hashgraph/full-stack-testing
helm executable extracted to temporary directory is globally writable.
- 主要语言
- Java
- 星标
- 9
- 派生
- 3
- PR 合并指标
- 30 天内没有已合并 PR
描述
### Bill of Materials or CLI Version
_No response_
### Execution Environment
JUnit Extensions
### Slf4j Logging Implementation
None
### To Reproduce
```markdown
Use helm client, inspect temporary directory with name such as `HelmSoftwareLoader4512790602684642253` containing globally writable helm executable.
```
### Describe the bug
`helm` executable is extracted as globally writable file.
### Describe the expected behavior
Extracted executable does not need to be writable, especially not be group or world.
### Whole JUnit/CLI Logs
```shell
N/A
```
### Additional Context
_No response_
贡献指南
调研方向
Locate HelmSoftwareLoader and the code that extracts the helm executable into its temporary directory. Reproduce the extraction and inspect the resulting file permissions, then verify the fix with the relevant JUnit extension tests; done means the executable is not group- or world-writable.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- helm, java
- 领域
- devops, security
- Issue 类型
- 缺陷
- 难度
- 2/5
- 预计耗时
- 1-3 小时
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 48/100