commit cc05489089e635aa94cf91bf203c40bebcb25cb1
author Lorenzo Colitti <lorenzo@google.com> Fri Mar 24 06:30:56 2017 +0000
committer android-build-merger <android-build-merger@google.com> Fri Mar 24 06:30:56 2017 +0000
tree 7b8ec1c91aad8f0fc441c4df8dcc7cd00c7def68
parent b8e01034727e51cd22f086fdbb47687378786038
parent 9bcf2832c4d611d3769810fdff3b93445fab5107

Merge "Make the xtables lock readable only by AID_RADIO and root."
am: 438720ac2c

Change-Id: I81d8a81465715a63e4442568deaa5bac5d4f7c56

libcutils/fs_config.c

diff --git a/libcutils/fs_config.c b/libcutils/fs_config.c
index f833af6..6a57a41 100644
--- a/libcutils/fs_config.c
+++ b/libcutils/fs_config.c
@@ -167,6 +167,7 @@
     { 00555, AID_ROOT,      AID_ROOT,      0, "system/etc/ppp/*" },
     { 00555, AID_ROOT,      AID_ROOT,      0, "system/etc/rc.*" },
     { 00440, AID_ROOT,      AID_ROOT,      0, "system/etc/recovery.img" },
+    { 00440, AID_RADIO,     AID_ROOT,      0, "system/etc/xtables.lock" },
     { 00600, AID_ROOT,      AID_ROOT,      0, "vendor/build.prop" },
     { 00600, AID_ROOT,      AID_ROOT,      0, "vendor/default.prop" },
     { 00444, AID_ROOT,      AID_ROOT,      0, ven_conf_dir + 1 },