| commit | eb29cf2b1d4ea7474b963e2f79b39b917bc692b4 | [log] [tgz] |
|---|---|---|
| author | Lorenzo Colitti <lorenzo@google.com> | Wed Mar 22 16:37:42 2017 +0900 |
| committer | Lorenzo Colitti <lorenzo@google.com> | Wed Mar 22 17:03:19 2017 +0900 |
| tree | 15823bba1129e1a56d720d997634dc8e6ae6e961 | |
| parent | 9d4554483fb3477e0daffe0bed18937fe4dc4915 [diff] |
Make the xtables lock readable only by AID_RADIO and root. Anyone who can read this file can call flock(..., LOCK_EX) on it, thereby blocking any future iptables commands from running. Restrict it to user AID_RADIO, which includes device-specific network management daemons, and group root. Bug: 36108349 Test: see https://android-review.googlesource.com/#/c/348939/ Change-Id: I4dae4b5a835fabdc1a61a330e0446b39651f8156