Chirantan Ekbote ba3269fd39 devices: fs: Initialize security context on creation ... Set the security context (via /proc/thread-self/attr/fscreate) before creating files, directories, nodes, or symlinks. This ensures that these entries appear atomically with the correct selinux labels. BUG=b:155441848,b:158326112 TEST=vm.Virtiofs, arc.PlayStore.vm TEST=Use strace to verify that selinux contexts are written to the fscreate proc file before creation. Cq-Depend: chromium:2291828 Change-Id: Id960dbc821540373f2df073768e3ebfcb1a1c3f1 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2239728 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org> Commit-Queue: Chirantan Ekbote <chirantan@chromium.org> Auto-Submit: Chirantan Ekbote <chirantan@chromium.org>		2020-08-12 04:38:27 +00:00
..
src	devices: fs: Initialize security context on creation	2020-08-12 04:38:27 +00:00
Cargo.toml	Use hypervisor abstraction to run VMs	2020-08-11 04:51:34 +00:00