[roll] Roll fuchsia [sestarnix] Enforce todo_check_permission() with selinux_test_suite

If the Kernel has the selinux_test_suite "feature" enabled, which
indicates that it was instantiated for testing, then enforce all
todo_check_permission() checks rather than audit-logging but
permitting them.

This allows the SELinux Test Suite to run with all integrated and
implemented access checks enforced, with only the exceptions
configuration used to track fine-grained exceptions.

Original-Bug: 385121365, 404739824, 398663322, 398707800, 398707792, 398698175
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1240806
Original-Revision: 2c5cc54783dc1b53aec33c371fa312423a2cc08d
GitOrigin-RevId: b7f9ba965e191c4690b666a18ec087ba8c78cc6e
Change-Id: Ib5abe3fb92bcd6f7b30acdde825807064872562a
1 file changed
tree: 1ed70f7f696b6546230d09b178efeb0cc7a3c38c
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cts
  6. firmware
  7. flower
  8. jiri.lock
  9. MILESTONE
  10. minimal
  11. prebuilts
  12. README.md
  13. stem
  14. test_durations
  15. toolchain
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.