config: fix access for config and history file

Fixes apache#157

Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>

Author: shwstppr

config/config.go

@@ -263,6 +263,7 @@ func saveConfig(cfg *Config) *Config {
 		conf.Section(defaultCoreConfig.ProfileName).ReflectFrom(&defaultProfile)
 		conf.SaveTo(cfg.ConfigFile)
 	}
+	makeFileGroupPrivate(cfg.ConfigFile)
 
 	conf := readConfig(cfg)
 
@@ -318,6 +319,10 @@ func saveConfig(cfg *Config) *Config {
 		profiles = append(profiles, profile.Name())
 	}
 
+	if cfg.HistoryFile != "" {
+		makeFileGroupPrivate(cfg.HistoryFile)
+	}
+
 	return cfg
 }
 
@@ -391,6 +396,12 @@ func (c *Config) UpdateConfig(key string, value string, update bool) {
 	}
 }
 
+func makeFileGroupPrivate(filePath string) {
+	if fi, err := os.Stat(filePath); err == nil && fi.Mode().IsRegular() {
+		_ = os.Chmod(filePath, 0660)
+	}
+}
+
 // NewConfig creates or reload config and loads API cache
 func NewConfig(configFilePath *string) *Config {
 	defaultConf := defaultConfig()