Patched code sample

import os
import stat

def create_directory_securely(path, mode=0o750):  # Restrictive default mode
    """
    Creates a directory with specified permissions securely, avoiding overly permissive modes.
    """
    try:
        os.makedirs(path, exist_ok=True) # Create if it does not exist

        # Explicitly set permissions after creation to avoid umask issues
        os.chmod(path, mode)
        print(f"Directory '{path}' created with permissions {oct(mode)}")

    except OSError as e:
        print(f"Error creating directory '{path}': {e}")


def create_file_securely(path, content, mode=0o640):  # Restrictive default mode
    """
    Creates a file and writes content to it with specified permissions securely.
    """
    try:
        with open(path, 'w') as f:
            f.write(content)

        # Explicitly set permissions after creation
        os.chmod(path, mode)
        print(f"File '{path}' created with permissions {oct(mode)}")

    except OSError as e:
        print(f"Error creating file '{path}': {e}")


# Example usage (demonstrating fix):
if __name__ == '__main__':
    directory_path = "secure_dir"
    file_path = os.path.join(directory_path, "secure_file.txt")

    # Create directory with restricted permissions (owner and group read/write/execute)
    create_directory_securely(directory_path)

    # Create file with restricted permissions (owner read/write, group read)
    create_file_securely(file_path, "This is some sensitive data.")


    # Example of what NOT to do (vulnerable code - DO NOT USE):
    # os.makedirs("insecure_dir", exist_ok=True)
    # os.chmod("insecure_dir", 0o777)  # World-readable and executable! DANGEROUS