@newrelic/security-agent 0.7.0 → 1.1.0

package/lib/nr-security-agent/lib/core/FuzzFailEvent.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const { BasicInfo } = require('./event');

package/lib/nr-security-agent/lib/core/LinkingMetadata.js

@@ -1,7 +1,7 @@
 
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const API = require('../../../nr-security-api');

package/lib/nr-security-agent/lib/core/LogMessage.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const LinkingMetaData = require('./LinkingMetadata');

package/lib/nr-security-agent/lib/core/PodProperties.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 let podProperties;

package/lib/nr-security-agent/lib/core/Policy.js

@@ -1,7 +1,7 @@
 
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const API = require('../../../nr-security-api');

package/lib/nr-security-agent/lib/core/agent-status.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 const SecAgentStatus = function () {
     if (Object.getPrototypeOf(this).constructor !== SecAgentStatus) {

package/lib/nr-security-agent/lib/core/agent.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const { EventEmitter } = require('events');

package/lib/nr-security-agent/lib/core/apiEndpoints.js

@@ -0,0 +1,29 @@
+
+/*
+ * Copyright 2023 New Relic Corporation. All rights reserved.
+ * SPDX-License-Identifier: New Relic Software License v1.0
+ */
+
+const { BasicInfo } = require('./event');
+const applicationInfo = require('./applicationinfo').getInstance();
+/**
+ * Function Constructor to create object of FuzzFail event
+ * @param {*} fuzzHeader
+ */
+function APIEndPoint (apiEndpoints) {
+    BasicInfo.call(this);
+    this.jsonVersion = applicationInfo.jsonVersion;
+    this.jsonName = 'sec-application-url-mapping';
+    this.eventType = "sec-application-url-mapping"
+    this.applicationUUID = applicationInfo.applicationUUID;
+    this.groupName = applicationInfo.groupName;
+    this.mappings = apiEndpoints;
+
+    return this;
+}
+
+APIEndPoint.prototype.constructor = APIEndPoint;
+
+module.exports = {
+    APIEndPoint
+};

package/lib/nr-security-agent/lib/core/applicationinfo.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 'use strict';

package/lib/nr-security-agent/lib/core/commonUtils.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 /* eslint-disable prefer-promise-reject-errors */
@@ -97,11 +97,11 @@ function runtimeSupportsAsyncFunctionGenerators() {
 function createPathIfNotExist(dir) {
     try {
         if (!fs.existsSync(dir)) {
-            fs.mkdirSync(dir, 777, { recursive: true });
+            fs.mkdirSync(dir, 770, { recursive: true });
             logger.info(dir + ' Created');
-            fs.chmodSync(dir, 0o777);
+            fs.chmodSync(dir, 0o770);
         } else {
-            fs.chmodSync(dir, 0o777);
+            fs.chmodSync(dir, 0o770);
             logger.debug(dir + ' Already Exists');
         }
     } catch (error) {
@@ -139,7 +139,7 @@ function createDirectories() {
     createPathIfNotExist(`${CSEC_HOME}${SLASH}nr-security-home${SLASH}tmp${SLASH}language-agent${SLASH}${getUUID()}`);
     createPathIfNotExist(`${CSEC_HOME}${SLASH}nr-security-home${SLASH}tmp${SLASH}language-agent${SLASH}${getUUID()}${SLASH}ds-tmp`);
     try {
-        fs.chmodSync(`${CSEC_HOME}${SLASH}nr-security-home`, 0o777);
+        fs.chmodSync(`${CSEC_HOME}${SLASH}nr-security-home`, 0o770);
     } catch (error) {
     }
 }

package/lib/nr-security-agent/lib/core/connections/aws-lambda-client.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const _ = require('lodash');

package/lib/nr-security-agent/lib/core/connections/grpcClient.js

@@ -0,0 +1,111 @@
+/*
+ * Copyright 2023 New Relic Corporation. All rights reserved.
+ * SPDX-License-Identifier: New Relic Pre-Release
+ */
+const logger = require('../logging').getLogger();
+const grpcutils = require('../../../../instrumentation-security/core/grpc-utils');
+const clientMap = new Map();
+let grpc;
+const { NR_CSEC_FUZZ_REQUEST_ID } = require('../../core/sec-agent-constants');
+try {
+    grpc = require("@grpc/grpc-js");
+} catch (error) {
+
+}
+
+/**
+ * Utility to get client object
+ * @param {*} config 
+ * @returns 
+ */
+function getGPRCClient(config) {
+    try {
+        const serviceName = grpcutils.getMethod(config.method).serviceName;
+
+        if (clientMap.has(serviceName)) {
+            return clientMap.get(serviceName);
+        }
+        const serviceObject = grpcutils.getService(serviceName);
+        const definition = grpc.loadPackageDefinition(serviceObject);
+        let service = getNestedValue(definition, serviceName)
+        if (service) {
+            logger.info("GRPC client service extracted successfully");
+        }
+        const client = new service(
+            "localhost:" + config.serverPort,
+            grpc.credentials.createInsecure()
+        );
+        if (!clientMap.has(serviceName)) {
+            clientMap.set(serviceName, client);
+        }
+        if(client){
+            logger.info("GRPC IAST client created successfully");
+        }
+        return client;
+    } catch (error) {
+        logger.error("error while creating client:", error);
+    }
+
+}
+
+/**
+ * Utility to fire unary requests
+ * @param {*} client 
+ * @param {*} config 
+ */
+function fireUnaryRequest(client, config) {
+    try {
+        const methodObj = grpcutils.getMethod(config.requestURI);
+        if (methodObj && methodObj.originalName) {
+            let method = methodObj.originalName;
+            let metadata = new grpc.Metadata();
+            let bufferObj = Buffer.from(config.headers[NR_CSEC_FUZZ_REQUEST_ID], "utf8");
+            let base64String = bufferObj.toString("base64");
+            metadata.add(NR_CSEC_FUZZ_REQUEST_ID, base64String);
+            client[method](JSON.parse(config.data), metadata, (err, res) => {
+                if (err) {
+                    logger.debug("Error occured:", err);
+                    return
+                }
+
+                logger.info("Fuzz success: ", JSON.stringify(config));
+                return res;
+            })
+        }
+        else {
+            logger.debug("Not Found:", config.url);
+        }
+    } catch (error) {
+        logger.debug("Error while firing Unary request:", error);
+    }
+}
+
+/**
+ * fire gRPC request based on provided config 
+ * @param {*} config 
+ * @returns 
+ */
+function fireRequest(config) {
+    let client = getGPRCClient(config);
+    fireUnaryRequest(client, config)
+}
+
+
+  function getNestedValue(obj, targetKey) {
+    for (const key in obj) {
+      if (key === targetKey) {
+        return obj[key];
+      } else if (typeof obj[key] === 'object' && obj[key] !== null) {
+        const result = getNestedValue(obj[key], targetKey);
+        if (result !== undefined) {
+          return result;
+        }
+      }
+    }
+    return undefined; // Key not found
+  }
+
+
+module.exports = {
+    fireRequest
+};

package/lib/nr-security-agent/lib/core/connections/restclient.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const axios = require('axios').default;

package/lib/nr-security-agent/lib/core/connections/websocket/index.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const {

package/lib/nr-security-agent/lib/core/connections/websocket/response/IASTUtils.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 const { Agent } = require('../../../agent');
 let pendingRequestIds = new Set();

package/lib/nr-security-agent/lib/core/connections/websocket/response/collecotor-policy-error-handler.js

@@ -1,7 +1,7 @@
 
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 let logger;

package/lib/nr-security-agent/lib/core/connections/websocket/response/collector-policy-handler.js

@@ -1,7 +1,7 @@
 
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 let logger;

package/lib/nr-security-agent/lib/core/connections/websocket/response/fuzz-request-handler.js

@@ -1,12 +1,13 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 /* eslint-disable no-unused-vars */
 const stringify = require('fast-safe-stringify');
 
 const restClient = require('../../restclient');
+const grpcClient = require('../../grpcClient');
 const { Agent } = require('../../../agent');
 const { FuzzFailEvent } = require('../../../FuzzFailEvent');
 const { CSEC_HOME_TMP, COLON, NR_CSEC_FUZZ_REQUEST_ID, SLASH, CSEC_SEP, SEVERE } = require('../../../sec-agent-constants');
@@ -20,9 +21,6 @@ const LogMessage = require('../../../LogMessage');
 require('dns').setDefaultResultOrder('ipv4first')
 const PolicyManager = require('../../../Policy');
 
-const {
-    IS_LAMBDA_ENV,
-    AWS_LAMBDA_FUNCTION_VERSION_ENV_IDENTIFIER } = require('../../../sec-agent-constants');
 const statusUtils = require('../../../statusUtils');
 
 const find = `${SLASH}{{NR_CSEC_VALIDATOR_HOME_TMP}}`;
@@ -125,13 +123,16 @@ function handler(json) {
 function handleFuzzRequest(fuzzDetails) {
     const { fuzzRequest } = fuzzDetails;
     try {
-        if (IS_LAMBDA_ENV) {
-            const qualifiedARN = Agent.getAgent().applicationInfo.applicationUUID;
-            const splitArn = String.prototype.split.call(qualifiedARN, ':');
-            const arn = splitArn.slice(0, splitArn.length - 1).join(':');
-            const ver = process.env[AWS_LAMBDA_FUNCTION_VERSION_ENV_IDENTIFIER];
-            logger.info('Invoking Lambda:: ARN: ' + arn);
-            logger.info('Invoking Lambda:: Version: ' + ver);
+        if (fuzzRequest.protocol == 'grpc') {
+            const config = parseGRPCRequestToFuzz(fuzzRequest);
+            config.headers['nr-csec-parent-id'] = fuzzRequest.id;
+            IASTUtil.completedRequestsMapInit(fuzzRequest.id);
+            grpcClient.fireRequest(config);
+            if (fuzzRequest.headers && fuzzRequest.headers[NR_CSEC_FUZZ_REQUEST_ID]) {
+                logScannedApiId(fuzzRequest.headers[NR_CSEC_FUZZ_REQUEST_ID], fuzzRequest.requestURI)
+            }
+
+            IASTUtil.removePendingRequestId(fuzzRequest.id);
 
         } else {
             const config = parseAxiosHttpRequestToFuzz(fuzzRequest);
@@ -153,7 +154,6 @@ function handleFuzzRequest(fuzzDetails) {
 
 
             logger.info('Firing http request:: URL: ' + config.url);
-
             const response = restClient.fireRequest(config);
             handleFuzzResponse(response, fuzzDetails);
         }
@@ -210,6 +210,26 @@ function parseAxiosHttpRequestToFuzz(requestObject) {
     };
 }
 
+/**
+ * Parses the passed fuzz request object to
+ * Axios config.
+ *
+ * @param {JSON} requestObject
+ */
+function parseGRPCRequestToFuzz(requestObject) {
+    let serverName = requestObject.serverName ? requestObject.serverName : LOCALHOST;
+    let host = serverName + COLON + requestObject.serverPort
+    return {
+        url: requestObject.protocol + COLON_SLASH_SLASH + host + requestObject.url,
+        requestURI: requestObject.requestURI,
+        protocol: requestObject.protocol,
+        serverPort: requestObject.serverPort,
+        method: requestObject.method,
+        data: requestObject.body,
+        headers: requestObject.headers,
+        timeout: 5000,
+    };
+}
 
 
 /**

package/lib/nr-security-agent/lib/core/connections/websocket/response/iast-cool-down.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 let logger;

package/lib/nr-security-agent/lib/core/connections/websocket/response/iast-record-deletion.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 let logger;

package/lib/nr-security-agent/lib/core/connections/websocket/response/index.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const _ = require('lodash');

package/lib/nr-security-agent/lib/core/connections/websocket/response/no-op-handler.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 let logger;

package/lib/nr-security-agent/lib/core/connections/websocket/response/startup-handshake-handler.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const StartupConfig = require('../../../startup-config');
@@ -9,6 +9,7 @@ let logger = logs.getLogger();
 const initLogger = logs.getInitLogger();
 const LOG_MESSAGES = require('../../../sec-agent-constants').LOG_MESSAGES;
 const applicationInfoModule = require('../../../applicationinfo');
+const LogMessage = require('../../../LogMessage');
 
 module.exports.handler = function handler(json) {
     try {
@@ -17,6 +18,8 @@ module.exports.handler = function handler(json) {
       
         initLogger.info(LOG_MESSAGES.AGENT_INIT_WITH_PROP, JSON.stringify(startupConfig.config));
         initLogger.info('Security Agent is now ACTIVE for', applicationInfoModule.getInstance().applicationUUID);
+        const logMessage = new LogMessage.logMessage("SEVERE", `Security Agent is ACTIVE for ${ applicationInfoModule.getInstance().applicationUUID}`, __filename, null);
+        require('../../../commonUtils').addLogEventtoBuffer(logMessage);
 
     } catch (error) {
         logger.error(LOG_MESSAGES.PARSING_EXP_WELCOME_MSG, error);

package/lib/nr-security-agent/lib/core/connections/websocket/response/unsupported-agent-handler.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const agentStatus = require('../../../agent-status');

package/lib/nr-security-agent/lib/core/connections/websocket/response/ws-reconnect.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 let logger;

package/lib/nr-security-agent/lib/core/connections/websocket/websocket.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 'use strict';

package/lib/nr-security-agent/lib/core/event-stats.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 let eventStats = undefined;

package/lib/nr-security-agent/lib/core/event.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 'use strict';
@@ -24,7 +24,12 @@ function BasicInfo() {
     this.jsonVersion = AGENT_VERSION;
     this.collectorType = COLLECTOR_TYPE;
     this.language = LANGUAGE;
-    this.framework = EMPTY_STR;
+    try {
+        let framework = NRAgent.environment.get('Framework')[0];
+        this.framework = framework ? framework : EMPTY_STR;
+    } catch (error) {
+        this.framework = EMPTY_STR;
+    }
     this.groupName = commonUtils.getCSECmode();
     this.policyVersion = (!lodash.isEmpty(policyManager.getInstance().data)) ? policyManager.getInstance().data.version : 'DEFAULT';
 

package/lib/nr-security-agent/lib/core/health-check.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 'use strict';

package/lib/nr-security-agent/lib/core/json-file-handler.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const fs = require('fs');

package/lib/nr-security-agent/lib/core/jsonValidator.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const Validator = require('jsonschema').Validator;

package/lib/nr-security-agent/lib/core/lambda-delegated-task-service.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const { Agent } = require('./agent');

package/lib/nr-security-agent/lib/core/logging.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 'use strict';
@@ -31,11 +31,11 @@ const CSEC_ROOT = `${CSEC_HOME}${sep}nr-security-home${sep}`;
 function createLogPathIfNotExist(dir) {
     try {
         if (!fs.existsSync(dir)) {
-            fs.mkdirSync(dir, 777, { recursive: true });
-            fs.chmodSync(dir, 0o777);
+            fs.mkdirSync(dir, 770, { recursive: true });
+            fs.chmodSync(dir, 0o770);
         }
         else {
-            fs.chmodSync(dir, 0o777);
+            fs.chmodSync(dir, 0o770);
         }
     } catch (error) {
     }
@@ -168,8 +168,8 @@ function getLogger(applicationUUID = process.env.applicationUUID) {
         logger = log4js.getLogger('NR_CSEC');
         const initLogger = getInitLogger();
         try {
-            fs.chmodSync(`${logFileName}`, 0o777);
-            fs.chmodSync(`${initLogFileName}`, 0o777);
+            fs.chmodSync(`${logFileName}`, 0o660);
+            fs.chmodSync(`${initLogFileName}`, 0o660);
         } catch (error) {
         }
         initLogger.info("[STEP-2] => Generating unique identifier:", applicationUUID)

package/lib/nr-security-agent/lib/core/sec-agent-constants.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 'use strict';

package/lib/nr-security-agent/lib/core/sec-util.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 'use strict';

package/lib/nr-security-agent/lib/core/sha-size-util.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 'use strict';

package/lib/nr-security-agent/lib/core/sha_worker.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 const { workerData, parentPort } = require('worker_threads');

package/lib/nr-security-agent/lib/core/startup-config.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 let startupConfig = undefined;

package/lib/nr-security-agent/lib/core/statusUtils.js

@@ -1,6 +1,6 @@
 /*
  * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Pre-Release
+ * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
 /* eslint-disable new-cap */
@@ -93,7 +93,7 @@ function getFormattedData() {
 function writeSnapshot() {
     const snapshot = getFormattedData();
     commonUtils.removeOlderSnapshots();
-    fs.writeFile(statusFile, snapshot, { mode: 0o777 }, function (err) {
+    fs.writeFile(statusFile, snapshot, { mode: 0o660 }, function (err) {
         if (err) {
             logger.debug(err.message);
             const LogMessage = require('./LogMessage');
@@ -101,7 +101,7 @@ function writeSnapshot() {
             commonUtils.addLogEventtoBuffer(logMessage);
         } else {
             logger.info('Snapshot updated to file: %s', statusFile);
-            fs.chmod(statusFile, 0o777, (err) => {
+            fs.chmod(statusFile, 0o660, (err) => {
                 if (err) {
                     addErrortoBuffer(err);
                 }