From fd6cb07e5d466e47d7fb46f6253c6d86e1fccc35 Mon Sep 17 00:00:00 2001
From: zab2 <zab2@mail.i2p>
Date: Thu, 28 Mar 2019 16:25:36 +0000
Subject: [PATCH] use SecureFileOutputStream

---
 .../java/src/net/i2p/i2ptunnel/access/AccessFilter.java    | 7 +++++--
 .../java/src/net/i2p/i2ptunnel/ui/TunnelConfig.java        | 3 ++-
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/access/AccessFilter.java b/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/access/AccessFilter.java
index 72e1e3be7..acadff3e5 100644
--- a/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/access/AccessFilter.java
+++ b/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/access/AccessFilter.java
@@ -9,13 +9,14 @@ import java.util.Iterator;
 import java.io.File;
 import java.io.FileReader;
 import java.io.BufferedReader;
-import java.io.FileWriter;
+import java.io.OutputStreamWriter;
 import java.io.BufferedWriter;
 import java.io.IOException;
 
 import net.i2p.I2PAppContext;
 import net.i2p.util.SimpleTimer2;
 import net.i2p.util.Log;
+import net.i2p.util.SecureFileOutputStream;
 import net.i2p.data.Destination;
 import net.i2p.i2ptunnel.I2PTunnelTask;
 import net.i2p.client.streaming.IncomingConnectionFilter;
@@ -109,7 +110,9 @@ class AccessFilter implements IncomingConnectionFilter {
 
             BufferedWriter writer = null; 
             try {
-                writer = new BufferedWriter(new FileWriter(file)); 
+                writer = new BufferedWriter(
+                    new OutputStreamWriter(
+                        new SecureFileOutputStream(file)));
                 for (String b32 : breached) {
                     writer.write(b32);
                     writer.newLine();
diff --git a/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/ui/TunnelConfig.java b/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/ui/TunnelConfig.java
index ee41235e2..a5068c730 100644
--- a/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/ui/TunnelConfig.java
+++ b/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/ui/TunnelConfig.java
@@ -30,6 +30,7 @@ import net.i2p.i2ptunnel.I2PTunnelServer;
 import net.i2p.i2ptunnel.TunnelController;
 import net.i2p.util.ConcurrentHashSet;
 import net.i2p.util.PasswordManager;
+import net.i2p.util.SecureFileOutputStream;
 
 /**
  * Helper class to generate a valid TunnelController configuration from provided
@@ -633,7 +634,7 @@ public class TunnelConfig {
                 config.setProperty(TunnelController.PROP_FILTER, dslFile);
                 FileOutputStream fos = null;
                 try {
-                    fos = new FileOutputStream(dslFile);
+                    fos = new SecureFileOutputStream(dslFile);
                     fos.write(_filterDefinition.getBytes());
                 } catch (IOException bad) {
                     throw new RuntimeException("failed to save access rules", bad);