[roll] Roll fuchsia [sestarnix] Introduce AccessDecision to query APIs

AccessDecision encapsulates the allowed, audit-allow and audit-deny
bits for each permission, and a flags field which is currently used
to indicate whether or not the source domain is listed in the
policy's permissive domains map.

SecurityServer permission-check tests are updated to validate that
the expected audit decisions are made, and test cases are added
for the handling of enforcing, domain-permissive and global-
permissive access checks against kernel classes/permissions that
are not defined in the policy.

Original-Bug: 362706116,
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1147712
Original-Revision: 165c61b6b94f02ab68f4b5abb583300f1d608a85
GitOrigin-RevId: 4a326b7360e2fa74389ad306f01532c1a1a42eaa
Change-Id: Ic28a27968775276171dd6a8613b2142bdee7a066
1 file changed
tree: 5f289fe7406d16ed99229632b81d29356b0e7109
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cts
  6. firmware
  7. flower
  8. jiri.lock
  9. MILESTONE
  10. minimal
  11. prebuilts
  12. README.md
  13. stem
  14. test_durations
  15. toolchain
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.