Explicitly allow netd to take the iptables lock. am: 9273c1bb am: f692d2fd

am: a0804de2

Change-Id: I1c39dedf06bf0e791fc885c535c47ab410fa1905

public/netd.te

@@ -55,6 +55,9 @@ allow netd net_data_file:file create_file_perms;
 allow netd net_data_file:dir rw_dir_perms;
 allow netd self:capability fowner;
 
+# Needed to lock the iptables lock.
+allow netd system_file:file lock;
+
 # Allow netd to spawn dnsmasq in it's own domain
 allow netd dnsmasq:process signal;