tree 15d1293bf8a2d4119eab304d1760e23bc5e0fbd6
parent 784967be4d56903b43b4bcaf2606bcb26be1597e
author Eric Seckler <eseckler@google.com> 1580737628 +0000
committer Eric Seckler <eseckler@google.com> 1580737628 +0000

ipc: Add an option to require file seals when mapping shm.

In preparation for producer-provided SMBs, this patch makes
PosixSharedMemory::AttachToFd optionally ignore FDs that aren't sealed.

This only takes effect on systems where file seals (memfd) are
supported. Iff require_seals is set, and a non-sealed or non-memfd FD
is provided on a system that supports sealed memfds, the mapping is
aborted.

Bug: 147742905
Change-Id: I80cb2ed90804a43f27e3c8e715ca22f1c73d5acf