no-permissive-file-permission

Disallow world-writable and decimal file permission literals

World-writable permissions let every local user modify the created entry, while decimal notation obscures the selected mode bits.
Instead, you SHOULD grant only the required permissions and write mode literals in octal notation.

- Category: security
- Level: warning
- Fix: none
- Scope: module

Reported

import { FileMode } from "destack:fs/binding";

const mode = FileMode(0o666);
Accepted

import { FileMode } from "destack:fs/binding";

const mode = FileMode(0o640);
Prior art

- Clippy · nonoctalunixpermissions
- Ruff · bad-file-permissions

language/linter/src/rules/security/nopermissivefilepermission.rs:8