tree 41dd0064dbdf4cf8b695dbdf49121cd1f8e7ee09
parent 94e1b82826762404589e61904139bba3a86964bd
author Ratan Gupta <ratagupt@linux.vnet.ibm.com> 1562871745 +0530
committer Ed Tanous <ed.tanous@intel.com> 1564777505 +0000

Change the permission of the session database

bmcweb_persistent_data.json have all the session info,
any user having less privilege can get access to this file
which is having sensitive data(user authentication token)

This commit fixes this bug by allowing the read write permission
to the owner and group and others would not be having either read
or write permission.

TestedBy: -> Create the redfish session
          -> check the permission of the file.
          -> Stop the bmcweb and remove the session file
             restart the bmcweb and check the permission
             of the file.
          -> Create the session again and perfrom the
             GET request on Manager,AccountService to verify the
             other operation is working.

Signed-off-by: Ratan Gupta <ratagupt@linux.vnet.ibm.com>
Change-Id: I1e69ac147a2cfc3dff150322aee1f430ac552a5a