[roll] Roll fuchsia [sestarnix] Move setpgid MAC checks after DAC checks

Previously, we checked the SEStarnix setpgid permission before
checking, e.g. that the process hasn't exec()'d yet. This leads to the
same result (possibly up to getting EPERM instead of EACCES), but this
means that we would print an `avc: denied` message.

This change pushes the check inside ThreadGroup::setpgid, after all
other checks have been performed.

Original-Bug: 411317395
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1258464
Original-Revision: 611e155229e3cf7da1d28e13b33d96fc1f6ea3e0
GitOrigin-RevId: 60e992a23c5e6bf72918928e8cb369272931a6fc
Change-Id: I0f5b3ff8078bcf9bef9f6b2cee44c5b78c81d108
1 file changed
tree: e651e27e0a6b2e5f65e87e0b28e54b002f918add
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cts
  6. firmware
  7. flower
  8. jiri.lock
  9. MILESTONE
  10. minimal
  11. prebuilts
  12. README.md
  13. stem
  14. test_durations
  15. toolchain
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.