CWE-732: Insecure Directory Permissions

[omordyk]

Description:
CWE-732: Insecure Directory Permissions
A sensitive sink functions were discovered. It causes a High severity Insecure Directory Permissions vulnerability.

The permission mode is passed as an integer to the os.MkdirAll function, which can lead to unintended permissions. The issue stems from how the permissions are specified in Go. The resulting permissions may be interpreted incorrectly.
To prevent unintended permissions, you should specify the mode in octal format.

List of problem places:

cluster_install_files.go:154
css.go:340
certificate.go:44
dependency.go:241
policy_file.go:916
resource_manager.go:97
utils.go:402
cluster_install_files.go:444
utils.go:421

https://cwe.mitre.org/data/definitions/732.html