[roll] Roll fuchsia [starnix][vfs] Early-reject attempts to write to a StaticDirectory With SEStarnix enabled, we would see a number of `add_name` denials when a process attempts to write a /proc/pid/<file> that doesn't exist, and the process calls open with O_CREAT. To avoid confusing denials, reject the write early in `check_access`, before MAC checks are performed. Original-Bug: 408330052 Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1248505 Original-Revision: 8c9ad6c44138ebd9214af7d7100063dbaa88a02d GitOrigin-RevId: c3a1d0760cfbc080e182693ffc516546836ab2e7 Change-Id: Ic0be17131cdd4934720c5e2cd2238534ac38cdb8
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party.