Add SecUploadFileMode validation to rules_set_properties and regressi…

[Diamagnetic]

what

• Updated SecUploadFileMode handling to preserve octal file permissions.
• Added a regression test that verifies uploaded temporary files preserve the configured octal permissions (0600).
• Added a Lua helper used by @inspectFile to validate the file mode of temporary upload files.

why

• SecUploadFileMode values represent Unix permission masks and must be interpreted as octal values.
• The reported issue occurred because file mode 0600 was interpreted as decimal 600, resulting in uploaded temporary files being created with file mode 01130 (decimal 600) instead of octal 0600.
• Ensure uploaded files created via multipart uploads remain readable by @inspectFile and other FILES_TMPNAMES consumers.
• Prevent future regressions by adding automated test coverage.

references

• closes SecUploadFileMode parsed as decimal instead of octal; temp files have no read permission #3580

[Copilot]

Pull request overview

This PR fixes SecUploadFileMode parsing so that configured permission masks (e.g., 0600) are interpreted as octal and applied correctly to multipart temporary upload files, and adds regression coverage to prevent reintroducing the decimal-parsing regression described in #3580.

Changes:

• Parse SecUploadFileMode as an octal value by introducing a dedicated ConfigFileMode config type.
• Add a regression test that exercises multipart uploads plus @inspectFile against FILES_TMPNAMES with SecUploadFileMode 0600.
• Add a Lua helper used by @inspectFile in the regression test to validate the upload temp file behavior.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
test/test-suite.in	Registers the new regression test in the test suite.
test/test-cases/regression/config-upload-file-mode.json	Adds a regression case asserting SecUploadFileMode 0600 preserves expected behavior for temp files consumed by @inspectFile.
test/test-cases/data/inspectFile-mode-600.lua	Adds the Lua helper used by the regression test to validate the temp file.
headers/modsecurity/rules_set_properties.h	Introduces ConfigFileMode (octal parsing) and uses it for m_uploadFileMode.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Diamagnetic]

@airween I have addressed the review feedback in the latest commits. Just checking in to see if there are any further comments when you have a chance.