Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

File/folder permissions checks #427

Open
SteveL-MSFT opened this issue Apr 27, 2024 · 1 comment
Open

File/folder permissions checks #427

SteveL-MSFT opened this issue Apr 27, 2024 · 1 comment
Labels
Issue-Enhancement The issue is a feature or idea Needs Triage
Milestone
3.0-RC

Comments

@SteveL-MSFT
Copy link
Member

Summary of the new feature / enhancement

Anywhere that dsc reads a file, we should check that the file and it's containing directory isn't world writable. If so, we should error and not allow as it is not trusted.

Proposed technical implementation details (optional)

No response
@SteveL-MSFT SteveL-MSFT added Issue-Enhancement The issue is a feature or idea Needs Triage labels Apr 27, 2024
@SteveL-MSFT SteveL-MSFT added this to the 3.0-RC milestone Apr 27, 2024
@anmenaga
Copy link
Collaborator

anmenaga commented May 1, 2024

Probably, such strict mode should be opt-in.
Otherwise users, who just want to run their configs, will be getting a lot of roadblocks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Issue-Enhancement The issue is a feature or idea Needs Triage
Projects
None yet
Milestone
3.0-RC
Development

No branches or pull requests
2 participants
@SteveL-MSFT @anmenaga