rspec/rules/S5443/recommended.adoc
2020-06-30 17:16:12 +02:00

9 lines
408 B
Plaintext

== Recommended Secure Coding Practices
* Use a dedicated sub-folder with tightly controlled permissions
* Use secure-by-design APIs to create temporary files. Such API will make sure:
** The generated filename is unpredictable
** The file is readable and writable only by the creating user ID
** The file descriptor is not inherited by child processes
** The file will be destroyed as soon as it is closed