commit db3d45fa4868275f37fd8bfab9df24b98188039e
author Lorenzo Colitti <lorenzo@google.com> Fri Mar 24 06:34:51 2017 +0000
committer android-build-merger <android-build-merger@google.com> Fri Mar 24 06:34:51 2017 +0000
tree 837680325af794666b135da71fd379b16a0a89a8
parent 9ca6e8a2a48d3853b8a4c0d0f9351db9773ab1da
parent bc918e922e9ca973de62ddfe5a2d5320aa68200a

Merge "Make the xtables lock readable only by AID_RADIO and root." am: 438720ac2c am: 82cf4caaaa
am: bc918e922e

Change-Id: Icb129aaa1998632b6fffde4802a123b6bee9a26a

libcutils/fs_config.c

diff --git a/libcutils/fs_config.c b/libcutils/fs_config.c
index 50b44cb..fdcf22f 100644
--- a/libcutils/fs_config.c
+++ b/libcutils/fs_config.c
@@ -167,6 +167,7 @@
     { 00555, AID_ROOT,      AID_ROOT,      0, "system/etc/ppp/*" },
     { 00555, AID_ROOT,      AID_ROOT,      0, "system/etc/rc.*" },
     { 00440, AID_ROOT,      AID_ROOT,      0, "system/etc/recovery.img" },
+    { 00440, AID_RADIO,     AID_ROOT,      0, "system/etc/xtables.lock" },
     { 00600, AID_ROOT,      AID_ROOT,      0, "vendor/build.prop" },
     { 00600, AID_ROOT,      AID_ROOT,      0, "vendor/default.prop" },
     { 00444, AID_ROOT,      AID_ROOT,      0, ven_conf_dir + 1 },