commit 77a744d9133a7e620be2880560140c5c1f8d58f4
author Brian Bosak <bbosak@google.com> Tue Sep 24 16:13:57 2024 +0000
committer CQ Bot <fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com> Tue Sep 24 16:13:57 2024 +0000
tree 6c8a1fb67ffc55b8580549cdf05d853a490b9a57
parent c60d0ca2313c967bf9ee4928a94c1d393b7b85b1

Revert "[sestarnix] Eagerly initialize FsNode labeling details"

This reverts commit 413406bb9941700a7a0fe965e28faf1428ad0f6c.

Reason for revert: b/369268313

Original change's description:
> [sestarnix] Eagerly initialize FsNode labeling details
>
> Previously labels for FsNodes were resolved on-demand, with the
> fs_node_effective_sid() helper calling on to the
> fs_node_resolve_security_label() helper.
>
> Labels are now resolved for unlabeled FsNodes directly by the
> fs_node_init_with_dentry() hook, when they are first linked into
> a DirEntry. e.g. for genfscon they will be labeled based on their
> FileSystem-relative path, and for fs_use_xattr their security
> attribute will be read, to populate a label.
>
> Special cases, such as creation of an FsNode for a new file, may
> label the node prior to it being linked into a DirEntry for the
> first time, in which case the fs_node_init_with_dentry() hook is
> a no-op.
>
> This requires that any FsNodes created in FileSystems prior to the
> SELinux policy being loaded are tracked, and proactively labeled
> along with the FileSystem. The initial implementation retains a
> set of weak references to the relevant DirEntries, to allow node
> labeling to take account of the FileSystem-relative path.
>
> Bug: 366405530
> Change-Id: I8f643971636346b3841512997f9efc2297076c04
> Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1119412
> Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com>
> Reviewed-by: Benjamin Lerman <qsr@google.com>

Bug: 366405530
Change-Id: I33702e3d133da3553ca91f8bf28ecc4871b1b5f1
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1124672
Reviewed-by: Wez <wez@google.com>
Commit-Queue: Brian Bosak <bbosak@google.com>