| commit | 4c45952bd961dfad3a30288040e07acddbbce749 | [log] [tgz] |
|---|---|---|
| author | Mark Dittmer <markdittmer@google.com> | Fri Nov 15 18:11:22 2024 +0000 |
| committer | CQ Bot <fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com> | Fri Nov 15 18:11:22 2024 +0000 |
| tree | 98638e0bf74c418fb2e48262e8c6c8cf2d02421b | |
| parent | 11b628da03383221f35fa48b06747fdb3babab04 [diff] |
[sestarnix] Stash /sys/fs/selinux/null file handle and use it to enforce fd use This change stashes a `FileHandle` to `/sys/fs/selinux/null` during selinuxfs initialization. The `FileHandle` is then used to remap file descriptors to null when they become inaccessible on exec (according to policy). Follow-up work will directly test the replace-with-null behaviour from userspace. Bug: b/322843830 Change-Id: I0ffb21f6bcf4149101d319066beae16be2e681d2 Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1147656 Reviewed-by: Wez <wez@google.com> Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com> Fuchsia-Auto-Submit: Mark Dittmer <markdittmer@google.com>
Fuchsia is an open source, general purpose operating system supporting modern 64-bit Intel and ARM processors.
We expect everyone interacting with our project to respect our code of conduct.
Read more about Fuchsia's principles.
See Getting Started.
See fuchsia.dev.