Were working towards implementing a SDLC for a company and as in any complex environment there are differences of opinion for the new process. Some of the developers want to make use of one directory others want to use another. Due to IT resource constraints there can be only one directory that will be exempted from e.g. real time anti-virus for performance and file integrity monitoring.
Environment specifics are:
- All source will be created and compiled on Windows platforms
- Most developers will have local admin rights
- Enterprise security tools such as AV, FIM and a hardened Win10 image are in place
- Different project teams use different languages, IDEs, compileres, tools etc
Are there specific security benefits to locating the source code in the user profile directory e.g
or is it irrelevant and a short directory such as:
Will work just as well with no security implications?