[roll] Roll fuchsia [sestarnix] Stash /sys/fs/selinux/null file handle and use it to enforce fd use

This change stashes a `FileHandle` to `/sys/fs/selinux/null` during
selinuxfs initialization. The `FileHandle` is then used to remap file
descriptors to null when they become inaccessible on exec (according to policy).

Follow-up work will directly test the replace-with-null behaviour from
userspace.

Original-Bug: b/322843830
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1147656
Original-Revision: 4c45952bd961dfad3a30288040e07acddbbce749
GitOrigin-RevId: c83119e6a904795489fabc0b4e564fbdd588e160
Change-Id: I934cb9c86715201e5a8743f4cf46962f41fc564e
1 file changed
tree: 5934824d1bb45e9b42e306f8ed9a9fb35dd6c08c
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cts
  6. firmware
  7. flower
  8. jiri.lock
  9. MILESTONE
  10. minimal
  11. prebuilts
  12. README.md
  13. stem
  14. test_durations
  15. toolchain
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.