@@ -170,7 +170,7 @@ func getFlavor(version string) string {
170170 if ! common .FileExists (filePath ) {
171171 return common .MySQLFlavor
172172 }
173- flavor , err := os .ReadFile (filePath )
173+ flavor , err := os .ReadFile (filePath ) // #nosec G304
174174 if err != nil || string (flavor ) == "" {
175175 return common .MySQLFlavor
176176 }
@@ -290,7 +290,7 @@ func buildTests(templateDir, dataDir, label string, data map[string]string) erro
290290 }
291291
292292 if ! common .DirExists (dataDir ) {
293- err := os .Mkdir (dataDir , 0755 )
293+ err := os .Mkdir (dataDir , 0750 )
294294 if err != nil {
295295 return fmt .Errorf ("[buildTests] error creating directory %s: %s" , dataDir , err )
296296 }
@@ -329,21 +329,21 @@ func buildTests(templateDir, dataDir, label string, data map[string]string) erro
329329 continue
330330 }
331331 conditionalPrint ("processing file %s\n " , fName )
332- contents , err := os .ReadFile (f )
332+ contents , err := os .ReadFile (f ) // #nosec G304
333333 if err != nil {
334334 return fmt .Errorf ("[buildTests] error reading file %s: %s" , f , err )
335335 }
336336
337337 subDataDir := path .Join (dataDir , sectionName )
338338 if ! common .DirExists (subDataDir ) {
339- err := os .Mkdir (subDataDir , 0755 )
339+ err := os .Mkdir (subDataDir , 0750 )
340340 if err != nil {
341341 return fmt .Errorf ("[buildTests] error creating directory %s: %s" , subDataDir , err )
342342 }
343343 }
344344 endDataDir := path .Join (subDataDir , label )
345345 if ! common .DirExists (endDataDir ) {
346- err := os .Mkdir (endDataDir , 0755 )
346+ err := os .Mkdir (endDataDir , 0750 )
347347 if err != nil {
348348 return fmt .Errorf ("[buildTests] error creating directory %s: %s" , endDataDir , err )
349349 }
@@ -363,20 +363,20 @@ func buildTests(templateDir, dataDir, label string, data map[string]string) erro
363363 }
364364 versionFile := path .Join (endDataDir , "DB_VERSION" )
365365 if ! common .FileExists (versionFile ) {
366- err = os .WriteFile (versionFile , []byte (data ["DbVersion" ]), 0644 )
366+ err = os .WriteFile (versionFile , []byte (data ["DbVersion" ]), 0600 )
367367 if err != nil {
368368 return fmt .Errorf ("[buildTests] error writing version file %s: %s" , versionFile , err )
369369 }
370370 }
371371 flavorFile := path .Join (endDataDir , "DB_FLAVOR" )
372372 if ! common .FileExists (flavorFile ) {
373- err = os .WriteFile (flavorFile , []byte (data ["DbFlavor" ]), 0644 )
373+ err = os .WriteFile (flavorFile , []byte (data ["DbFlavor" ]), 0600 )
374374 if err != nil {
375375 return fmt .Errorf ("[buildTests] error writing flavor file %s: %s" , flavorFile , err )
376376 }
377377 }
378378 testName := path .Join (endDataDir , fName + "_" + label + ".txtar" )
379- err = os .WriteFile (testName , buf .Bytes (), 0644 )
379+ err = os .WriteFile (testName , buf .Bytes (), 0600 )
380380 if err != nil {
381381 return fmt .Errorf ("[buildTests] error writing text file %s: %s" , testName , err )
382382 }
0 commit comments