[roll] Roll fuchsia [sestarnix] Migrate SELinux exceptions to a config capability

Allow containers and container embedders to provide the set of
SELinux access-check exceptions via a config capability.

This allows exceptions to be provided e.g. via subpackages, for
easier replacement during assembly.

The existing "default" exceptions configuration is migrated to be
the config capability's default value, allowing soft-transition of
each container definition to use their own exceptions.

The "selinux:<exceptions-file>" form is retained as an override,
and will also be removed once all containers have been soft-
transitioned.

Original-Bug: 409966399
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1252465
Original-Revision: 4823ec0ec1ab3adc593d0b0e6b438514409eafe6
GitOrigin-RevId: 170b6fd2290851f1bbf6340bd760868a033ab93a
Change-Id: Idc8ef32dfd1455a31b97b2e0150c37173f27181a
1 file changed
tree: 4331209c6141af687d00407b5851a5ea5636e1dc
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cts
  6. firmware
  7. flower
  8. jiri.lock
  9. MILESTONE
  10. minimal
  11. prebuilts
  12. README.md
  13. stem
  14. test_durations
  15. toolchain
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.