| commit | 36780a91543957d7e10720744b080de5f52778f3 | [log] [tgz] |
|---|---|---|
| author | Brandon Castellano <bcastell@google.com> | Wed Feb 12 10:15:36 2025 -0800 |
| committer | CQ Bot <fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com> | Wed Feb 12 10:15:36 2025 -0800 |
| tree | 29e7a11799a59524d8d5b392ef2840f070dad0d5 | |
| parent | f2564567bf617cc7e0d35700070062d8f30ff58d [diff] |
[device-watcher] Open directories with PERM_READABLE Previously in io1, the ability to enumerate directory entries and open child entries was unprivileged. In the current io2 rights model, we want to constrain these to the ENUMERATE and TRAVERSE/CONNECT rights, respectively. To ensure we can start to enforce this, we must ensure PERM_READABLE, which is a convenient alias including these rights, is used when opening directories that we want to perform these operations on. Bug: 324111518 Change-Id: I8716ece193fe074984176e5f2f6be36c7dee8adf Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1204165 Commit-Queue: Brandon Castellano <bcastell@google.com> Reviewed-by: Suraj Malhotra <surajmalhotra@google.com>
Fuchsia is an open source, general purpose operating system supporting modern 64-bit Intel and ARM processors.
We expect everyone interacting with our project to respect our code of conduct.
Read more about Fuchsia's principles.
See Getting Started.
See fuchsia.dev.