From 1ff8fee7c8e4fcd4ef12c6c5d1055b7eccf5809b Mon Sep 17 00:00:00 2001
From: Oscar Montemayor <oam@google.com>
Date: Mon, 22 Feb 2010 11:16:51 -0800
Subject: Better file permissions enforcement on system keystore.

---
 keystore/java/android/security/SystemKeyStore.java | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'keystore/java/android/security/SystemKeyStore.java')

diff --git a/keystore/java/android/security/SystemKeyStore.java b/keystore/java/android/security/SystemKeyStore.java
index 61a42931ae6e..abdb0aed8ce5 100644
--- a/keystore/java/android/security/SystemKeyStore.java
+++ b/keystore/java/android/security/SystemKeyStore.java
@@ -17,6 +17,7 @@
 package android.security;
 
 import android.os.Environment;
+import android.os.FileUtils;
 import android.os.Process;
 
 import java.io.File;
@@ -92,6 +93,8 @@ public class SystemKeyStore {
             fos.write(retKey);
             fos.flush();
             fos.close();
+            FileUtils.setPermissions(keyFile.getName(), (FileUtils.S_IRUSR | FileUtils.S_IWUSR),
+                -1, -1);
         } catch (IOException ioe) {
             return null;
         }
-- 
cgit v1.2.3