[roll] Roll fuchsia [sestarnix] todo_check ioctl xperms in check_file_ioctl_access

Starts checking ioctl commands against policy-defined
filters as part of the check_file_ioctl_access
hook, and enables the userspace test for ioctl filtering.

This change doesn't yet enable enforcement outside of
specific SEStarnix test contexts -- for now, extended
permission denials are logged and waived.

Original-Bug: 374832936

Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1236191
Original-Revision: 7f8c4125bff331e574efd85a6efdc064da8aa051
GitOrigin-RevId: 344299520b580acfead6f7bc9034953ed2d4299d
Change-Id: I4ce07633a3f109df8baab2203d6bdc6b085c9776
1 file changed
tree: 219ea8696c09501ea5393f85344c559f85521943
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cts
  6. firmware
  7. flower
  8. jiri.lock
  9. MILESTONE
  10. minimal
  11. prebuilts
  12. README.md
  13. stem
  14. test_durations
  15. toolchain
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.