Skip to content

Commit 1cc7bd8

Browse files
Wezcopybara-github
authored andcommitted
[roll] Roll fuchsia [sestarnix] Add permissions checks to fs_node_setsecurity()
When a file node's "security.selinux" xattr is modified, the system validates that the task has "relabelfrom" and "relabelto" rights to the new and old Security Contexts, respectively. The new Security Context should also be checked for the "associate" permission to the file-system; this check is made, but the result ignored, until correct file-system labels are implemented. Original-Bug: 351195217, 355180447 Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1112132 Original-Revision: ef955fef3cb849bd17334b626d72b801dcb3e13b GitOrigin-RevId: f5267470dabeccd13557f114247e3e4959d7a323 Change-Id: Ia08a82cf39ad65f34755c6ec0080eefb308b7af4
1 parent a3e17ad commit 1cc7bd8

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

stem

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
githooks="integration/git-hooks"
1212
remote="https://fuchsia.googlesource.com/fuchsia"
1313
gerrithost="https://fuchsia-review.googlesource.com"
14-
revision="b3001b3a8e06ef3946bd9b89fc0dec6d64df01e6"/>
14+
revision="ef955fef3cb849bd17334b626d72b801dcb3e13b"/>
1515
</projects>
1616
<hooks>
1717
<hook name="install-environment"

0 commit comments

Comments
 (0)