[roll] Roll fuchsia [sestarnix] Implement the memfd_class policy capability

Allow use of the "memfd_file" class to be disabled by default, via
the "memfd_class" policy capability.

The MemfdTest.* tests are reverted to the without-capability state.
Tests for the new behaviour will be re-landed once `checkpolicy`
is available with "memfd_class" capability support.

The "memfd_class" policy capability is temporarily ignored and
always-on unless "selinux_test_suite" is set in the kernel features
pending it being correctly set in upstream policies.

Original-Bug: 452453565, 458332374
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1433684
Original-Revision: ae94c646c1e1429bdc5da1efbf4f93bf308535d6
GitOrigin-RevId: a243b8ec534e933f0b298c3ab32aadf011b2ab84
Change-Id: I02abe083b79b50da2ffd2d756b4189aece49ba53
1 file changed
tree: 9cab92dd1d0963f15c8027290f834a56722b91e7
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. flower
  6. jiri.lock
  7. MILESTONE
  8. minimal
  9. prebuilts
  10. README.md
  11. stem
  12. test_durations
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.