[roll] Roll fuchsia [sestarnix] label unrooted anonymous nodes NamespaceNode::new_anonymous_unrooted now labels the nodes it creates by calling the appropriate security hook on the dentry it creates. Using the `fs_node_init_with_dentry` hook instead of `fs_node_init_on_create` correctly registers the node with the delayed-labeling-on-policy-load logic, which ensures that nodes created before policy load get properly labeled. `fs_node_init_with_dentry` requires being able to take a `FileOpsCore` lock. This is a problem, because we cannot always take this lock in contexts where creating an anonymous node is required. But these nodes, by definition, have no on-disk xattrs we would want to refer to. The change introduces a `fs_node_init_with_dentry_no_xattr` variant for this case that will not attempt to read xattrs. As a consequence (via FileObject::new_anonymous), pipes are correctly labeled, even when created before policy loading. Original-Bug: 380448690, 381871553 Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1204544 Original-Revision: c6ca0f0c01ed2b9e5444b75634e08e32b9e4c709 GitOrigin-RevId: d948865a0b04e012862ee35914524899c6393283 Change-Id: I5ac0ee41027774812524f92d0168e2d88cb479a8
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party.