commit a71faae86f3ff23c4400f0b1d0452b2d6d7fbe10
author David Anderson <dvander@google.com> Fri Jul 14 08:57:30 2023 -0700
committer David Anderson <dvander@google.com> Fri Jul 14 09:01:05 2023 -0700
tree 47f8c575d72669382477e622782aa46e254d1fe8
parent edeae250c9f9f73212529b8717f440dc7b6dea94

Allow processes in the "system" group to read /metadata/ota.

lpdumpd runs as "system", not "root". Adjust the DAC permissions of
/metadata/ota so it can call SnapshotManager::Dump.

Bug: 291083311
Test: lpdump
Change-Id: I97fd7eb2055cf6d31fd42f1021e2f99edbdb838a

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index 4f3959f..be03489 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -604,8 +604,8 @@
     chmod 0700 /metadata/vold
     mkdir /metadata/password_slots 0771 root system
     mkdir /metadata/bootstat 0750 system log
-    mkdir /metadata/ota 0700 root system
-    mkdir /metadata/ota/snapshots 0700 root system
+    mkdir /metadata/ota 0750 root system
+    mkdir /metadata/ota/snapshots 0750 root system
     mkdir /metadata/userspacereboot 0770 root system
     mkdir /metadata/watchdog 0770 root system