commit 14a22db5853116c902bef4bee973bde3bd1f954a
author Eric Seckler <eseckler@google.com> Mon Feb 03 13:47:08 2020 +0000
committer Eric Seckler <eseckler@google.com> Mon Feb 03 13:47:08 2020 +0000
tree 15d1293bf8a2d4119eab304d1760e23bc5e0fbd6
parent 784967be4d56903b43b4bcaf2606bcb26be1597e

ipc: Add an option to require file seals when mapping shm.

In preparation for producer-provided SMBs, this patch makes
PosixSharedMemory::AttachToFd optionally ignore FDs that aren't sealed.

This only takes effect on systems where file seals (memfd) are
supported. Iff require_seals is set, and a non-sealed or non-memfd FD
is provided on a system that supports sealed memfds, the mapping is
aborted.

Bug: 147742905
Change-Id: I80cb2ed90804a43f27e3c8e715ca22f1c73d5acf

BUILD

diff --git a/BUILD b/BUILD
index e7a59ac..2c0458e 100644
--- a/BUILD
+++ b/BUILD
@@ -1215,6 +1215,8 @@
     name = "src_tracing_ipc_common",
     srcs = [
         "src/tracing/ipc/default_socket.cc",
+        "src/tracing/ipc/memfd.cc",
+        "src/tracing/ipc/memfd.h",
         "src/tracing/ipc/posix_shared_memory.cc",
         "src/tracing/ipc/posix_shared_memory.h",
     ],