File permissions on config files should allow more restrictive setting

[leitzler]

The config files must have 0640 as file permission, otherwise the proxy won't start. This check should be a mask check to allow a more restrictive permission (like 0600, 0400, etc)

athens/pkg/config/config.go

Lines 149 to 151 in 48f7ca7

	// Assume unix based system (MacOS and Linux)
	if fInfo.Mode() != 0640 {
	return errors.E(op, f+" should have 0640 as permission")

Environment (please complete the following information):

• OS: linux
• Go version : 1.11.2
• Buffalo Version : -
• Proxy version : master
• Storage (fs/mongodb/s3 etc.) : mem/file

[leitzler]

Ok, so I also noticed that is is only the filter file that is checked.
I would say that is way more important to check the actual config file permissions since it can contain secrets like credentials for 3rd party services and such.