GitLab

Some interfaces on multi-interface USB devices should be blocked from
sharing with guests. The mechanism for this is a mask parameter sent to
PermissionBroker for use when it opens the raw USB fd for the guest to use.
The mask is a "drop privileges" mask that can only be used to narrow the
privileges given to the fd.

Change-Id: Ia37726384666a1b24e336d1e8b4ec66117b94384
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2196885
Commit-Queue: Nicholas Verne <nverne@chromium.org>
Reviewed-by: Sam McNally <sammc@chromium.org>
Reviewed-by: Ryo Hashimoto <hashimoto@chromium.org>
Reviewed-by: Fergus Dall <sidereal@google.com>
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Reviewed-by: David Munro <davidmunro@google.com>
Cr-Commit-Position: refs/heads/master@{#772143}