[roll] Roll fuchsia [starnix] Correct CAP_MKNOD checks creating dev nodes with Id zero
Normally mknod() requires CAP_MKNOD when called to create device
nodes, but with the exception of character device nodes with Id
zero, which do not.
This exception is used by the "overlay" filesystem to create
whiteout nodes regardless of whether the mounter is permitted the
CAP_MKNOD capability, or SELinux `capability { mknod }` permission.
Because "overlay" whiteouts use Id-zero character device nodes, the
overlay filesystem does not permit callers to create such nodes in
it, regardless of whether the caller holds CAP_MKNOD.
Original-Bug: 503347299, 398696739, 369067922
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1578533
Original-Revision: f0ce17aa031c94d9a837eeb3312afac794a16aca
GitOrigin-RevId: 52cf60cc2785db15602e5cd60a0a99bce2a2f237
Change-Id: I3a56976ce0a50ae3a2aece9763237d420a758503
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party.