config: fix access for config and history file (#166)

Fixes #157

---------

Signed-off-by: Abhishek Kumar <[email protected]>

Author: shwstppr

config/config.go

@@ -267,6 +267,7 @@ func saveConfig(cfg *Config) *Config {
 		conf.Section(defaultCoreConfig.ProfileName).ReflectFrom(&defaultProfile)
 		conf.SaveTo(cfg.ConfigFile)
 	}
+	makeFileUserPrivate(cfg.ConfigFile)
 
 	conf := readConfig(cfg)
 
@@ -322,6 +323,10 @@ func saveConfig(cfg *Config) *Config {
 		profiles = append(profiles, profile.Name())
 	}
 
+	if cfg.HistoryFile != "" {
+		makeFileUserPrivate(cfg.HistoryFile)
+	}
+
 	return cfg
 }
 
@@ -395,6 +400,14 @@ func (c *Config) UpdateConfig(key string, value string, update bool) {
 	}
 }
 
+func makeFileUserPrivate(filePath string) {
+	if fi, err := os.Stat(filePath); err == nil && fi.Mode().IsRegular() {
+		if err := os.Chmod(filePath, 0600); err != nil {
+			fmt.Printf("Failed to set permissions on %s: %v\n", filePath, err)
+		}
+	}
+}
+
 // NewConfig creates or reload config and loads API cache
 func NewConfig(configFilePath *string) *Config {
 	defaultConf := defaultConfig()