)]}'
{
  "commit": "2f69db27fd6cee49709a77175e90d9018fb6aa50",
  "tree": "cf5331a65187e084e7e70f9384f786bc153b7430",
  "parents": [
    "2952dfbe246f6d65142ae154119b7c6ddbb35e5e"
  ],
  "author": {
    "name": "Ambre Williams",
    "email": "ambre@fuchsia.infra.roller.google.com",
    "time": "Mon Feb 17 03:03:28 2025 -0800"
  },
  "committer": {
    "name": "Copybara-Service",
    "email": "copybara-worker@google.com",
    "time": "Mon Feb 17 03:05:55 2025 -0800"
  },
  "message": "[roll] Roll fuchsia [sestarnix] label unrooted anonymous nodes\n\nNamespaceNode::new_anonymous_unrooted now labels the nodes it creates\nby calling the appropriate security hook on the dentry it creates. Using\nthe `fs_node_init_with_dentry` hook instead of `fs_node_init_on_create`\ncorrectly registers the node with the delayed-labeling-on-policy-load\nlogic, which ensures that nodes created before policy load get properly\nlabeled.\n`fs_node_init_with_dentry` requires being able to take a `FileOpsCore`\nlock. This is a problem, because we cannot always take this lock in\ncontexts where creating an anonymous node is required. But these nodes,\nby definition, have no on-disk xattrs we would want to refer to. The\nchange introduces a `fs_node_init_with_dentry_no_xattr` variant for this\ncase that will not attempt to read xattrs.\n\nAs a consequence (via FileObject::new_anonymous), pipes are correctly\nlabeled, even when created before policy loading.\n\nOriginal-Bug: 380448690, 381871553\nOriginal-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1204544\nOriginal-Revision: c6ca0f0c01ed2b9e5444b75634e08e32b9e4c709\nGitOrigin-RevId: d948865a0b04e012862ee35914524899c6393283\nChange-Id: I5ac0ee41027774812524f92d0168e2d88cb479a8\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6c86e0f97bdf7a925c601f10a4045058bf029429",
      "old_mode": 33188,
      "old_path": "stem",
      "new_id": "8ce628b64de3af114185d720b6d6cb3495ac4284",
      "new_mode": 33188,
      "new_path": "stem"
    }
  ]
}