GPA status.json file fails CIS benchmark audits

[mabicca]

It has been reported, that CIS certification will fail due to /var/log/azure-proxy-agent/status.json set to 0644 instead of 0640.

In this example, Ubuntu CIS benchmark for 24.04 LTS requires most files to be set to 0640 or more restrictive permissions, however if the /var/log/azure-proxy-agent/status.json is changed to 0640 it will revert back to 0644 when the service restarts.

We need to either set the default to 0640 OR possibly give a configuration variable where customers can set the desired permission to allow them to pass CIS validations.