default session file Permits

Try umask(0) before session_start(). There are better ways of doing this with setacl on the folder.