[roll] Roll fuchsia [sestarnix] Validate BPF resource access in file_receive hook When a program receives BPF resources in a message, access to the underlying resources must be access-checked, rather than checking access to the FsNode associated with the file descriptors. Since BPF FsNode labels are seemingly unused, migrate BPF to use "private" anonymous nodes. Original-Bug: 398654362, 406437558 Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1243044 Original-Revision: e10ee533c1e7281d1b1efa95eb865da79d3f1eaa GitOrigin-RevId: ef419c66d17a5454ecc3ed9cd423f40b0e47d4be Change-Id: I2c0cfe5b9102fb3c5f6814f68f27cfce7bd8ee8f
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party.