[roll] Roll fuchsia [sestarnix] Migrate fd:use check on exec to has_file_permission()
Use the has_file_permission() helper to validate fd:use permission to
each entry in the FdTable, for consistency with checks performed by
file_* hooks. This will also allow audit messages to be improved to
include e.g. path information in audit logs for checks on FileObjects.
This change also switches the fd:use check on exec from todo-deny to
enforcing.
Original-Bug: 379870850
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1172254
Original-Revision: b883ce43fde16be5f6516116c69e78a4b5322fde
GitOrigin-RevId: a6b34738b17d67222ffd555d930cd4794ceabaf5
Change-Id: Ic5fbe63d8aa1dd4a36aa50f805bfdb2b1cc04f16
diff --git a/stem b/stem
index ec31326..cb0ef23 100644
--- a/stem
+++ b/stem
@@ -11,7 +11,7 @@
githooks="integration/git-hooks"
remote="https://fuchsia.googlesource.com/fuchsia"
gerrithost="https://fuchsia-review.googlesource.com"
- revision="3df9b585198ab09d0d30bcf57b76b1aca13b8409"/>
+ revision="b883ce43fde16be5f6516116c69e78a4b5322fde"/>
</projects>
<hooks>
<hook name="install-environment"
