[roll] Roll fuchsia [sestarnix] Reduce audit logging

Mostly this is a migration to the _noaudit variant of
check_task_capable but in three locations we flip the business logic
from "check the capability, then if necessary check the other stuff" to
"check the other stuff, and then only if the other stuff is
insufficient check the capability (with audit logging)".

(After some coding convention conversation we also rename
security::check_task_capable_noaudit security::is_task_capable_noaudit
(and similar for its selinux_hooks::task:: analog).)

Original-Bug: 397186254
Fixes: 397501481
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1216706
Original-Revision: fc01c52a1216d92672c6f6d896460045f7d412cc
GitOrigin-RevId: 6e8b9c6c5012857b58343e4f3205026035828c1f
Change-Id: Ibd6b502ee4ac8b51e0f0db9d19f66aeee63f85bb
1 file changed
tree: bf7fd7ccc31ca029dccf02fcf908fe370eca91a6
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cts
  6. firmware
  7. flower
  8. jiri.lock
  9. MILESTONE
  10. minimal
  11. prebuilts
  12. README.md
  13. stem
  14. test_durations
  15. toolchain
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.