| commit | d5c1cf4573d86f30db75e6660bf9d3feda76297d | [log] [tgz] |
|---|---|---|
| author | Wez <wez@fuchsia.infra.roller.google.com> | Tue Dec 10 15:24:49 2024 +0000 |
| committer | Copybara-Service <copybara-worker@google.com> | Tue Dec 10 07:26:23 2024 -0800 |
| tree | 3751b1deec28b45fe670635e61758ef9a1d82226 | |
| parent | 73e21a9d585a6e5dd7efa9a37d5b00f568971695 [diff] |
[roll] Roll fuchsia [sestarnix] Switch gsnfscon partial-paths to be prefix-matched
SEStarnix had implemented "genfscon" partial-path matching based
on whole path elements, on the basis that prefix-matching could
result in surprising (mis)matches.
It seems that the SELinux implementation actually performs a simple
prefix-match on the path, and that that behaviour is load-bearing,
e.g. for device-mapper ("dm-*" device node) labeling in some
policies.
Original-Bug: 383088888
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1170313
Original-Revision: a5858da728e56e46f0899005a8e7baf9ce99b6c3
GitOrigin-RevId: 572d83511cbf6f267361f824555bb5d51348a237
Change-Id: I5704df8a5bc8d422779c5163eda47ebaba5aa191
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party.