commit | 1aae748b9cb9787d63c873f77f62d01a6f823fa4 | [log] [tgz] |
---|---|---|
author | Brandon Castellano <bcastell@fuchsia.infra.roller.google.com> | Wed Feb 12 10:21:28 2025 -0800 |
committer | Copybara-Service <copybara-worker@google.com> | Wed Feb 12 10:26:06 2025 -0800 |
tree | b741989a6cf610989e322965a68ee8f5c7b67c56 | |
parent | a75fe32b32364d57cc1bb0033b8a202c3b3e1903 [diff] |
[roll] Roll fuchsia [device-watcher] Open directories with PERM_READABLE Previously in io1, the ability to enumerate directory entries and open child entries was unprivileged. In the current io2 rights model, we want to constrain these to the ENUMERATE and TRAVERSE/CONNECT rights, respectively. To ensure we can start to enforce this, we must ensure PERM_READABLE, which is a convenient alias including these rights, is used when opening directories that we want to perform these operations on. Original-Bug: 324111518 Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1204165 Original-Revision: 36780a91543957d7e10720744b080de5f52778f3 GitOrigin-RevId: 211e8226c81ad626230e7ae6b0e6b86813a20573 Change-Id: Ia21f0453ad74d4fe4bcdaadcb8212b96c0b4144a
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party
.