[roll] Roll fuchsia [sestarnix] Re-fix order of close-on-exec vs close-inaccessible-FDs

SELinux inaccessible/unusable file-descriptor checks are performed
when transitioning to a new security domain on `exec()`. These must
be performed only after close-on-exec has been applied to flagged
file descriptors, otherwise SELinux will do unnecessary work, and
potentially trigger audit logspam.

The SELinux userspace tests add a specific test case for this.

Original-Original-Bug: 511038500, 483368940
Original-Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1604628
Original-Original-Revision: 5309b13eca57689cd028f0a43c084b3144752e1a
GitOrigin-RevId: 55bd05a79f206deb28b082dec7a6b2c3c7dfbe6e
Change-Id: I0340a7fba5bc342bc56c2bbe759ec1d852b9a3fe
1 file changed
tree: 785260d88ed403692be42c6845d36b945fe6b14b
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cobalt
  6. flower
  7. jiri.lock
  8. MILESTONE
  9. minimal
  10. prebuilts
  11. README.md
  12. stem
  13. test_durations
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.