| commit | 47c5e0ab0d29786b832f59575a1744322aeb7632 | [log] [tgz] |
|---|---|---|
| author | Wez <wez@fuchsia.infra.roller.google.com> | Mon Sep 02 20:24:29 2024 +0000 |
| committer | Copybara-Service <copybara-worker@google.com> | Mon Sep 02 13:26:09 2024 -0700 |
| tree | 42da80310e43f128b53623c27b26b76a64c22fdf | |
| parent | b9894ba3a21f77996e708ff38b88e04f3af428ed [diff] |
[roll] Roll fuchsia [starnix][selinux] Rename & better integrate new-node hook Integrate fs_node_init_security_and_xattr() hook with the DirEntry code path in which the file system is requested to instantiate the `FsNode` (versus it already being found in the cache). This allows creation of new files to be observed, and labels to be applied based on appropriate context (e.g. fs_use_trans/xattr labelling based on the creating task & parent inode). Because this hook is also invoked when a file system returns a previously-used `FsNode` to re-insert into the cache, there is currently a special-case for calls for nodes with pre-existing labels. Introduce an fs_node_init_root_security() hook with no dependency on CurrentTask, to allow the root node of fs_use_trans/xattr labeled file systems to have the appropriate label set. This will eventually be folded into the fs_node_init_security_and_xattr() once the CurrentTask dependency can be resolved. Both hooks are initially hard-coded to only attempt to label nodes in the "tmpfs" filesystem, until policy-specified labelling information is made available. Original-Bug: 355809976 Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1103632 Original-Revision: 36e2276d1b96487eb702daadb3b145b093e3e8ba GitOrigin-RevId: 691e1e17bdcf7a528580d655692d7b09568e438d Change-Id: Ied56bb5c212ec12dd66b3ccabcd8daeb7aa1dcc2
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance via the IRC channel #fuchsia on Freenode.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party.