lib,permission: add permission.drop

[RafaelGSS]

Refs: #62223

[nodejs-github-bot]

Review requested:

• @nodejs/security-wg

[github-actions]

The notable-change PRs with changes that should be highlighted in changelogs. label has been added by @RafaelGSS.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

[codecov]

Codecov Report

❌ Patch coverage is 72.78481% with 43 lines in your changes missing coverage. Please review.
✅ Project coverage is 89.78%. Comparing base (586403f) to head (f36bd66).
⚠️ Report is 31 commits behind head on main.

Files with missing lines	Patch %	Lines
src/permission/fs_permission.cc	71.62%	17 Missing and 4 partials ⚠️
src/permission/permission.cc	84.61%	0 Missing and 8 partials ⚠️
lib/internal/process/permission.js	58.33%	5 Missing ⚠️
src/permission/addon_permission.cc	0.00%	3 Missing ⚠️
src/permission/inspector_permission.cc	0.00%	3 Missing ⚠️
src/permission/wasi_permission.cc	0.00%	3 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #62672      +/-   ##
==========================================
- Coverage   91.52%   89.78%   -1.74%     
==========================================
  Files         354      699     +345     
  Lines      148921   216392   +67471     
  Branches    23352    41364   +18012     
==========================================
+ Hits       136304   194296   +57992     
- Misses      12354    14214    +1860     
- Partials      263     7882    +7619     

Files with missing lines	Coverage Δ
lib/internal/process/pre_execution.js	97.22% <100.00%> (+13.11%)	⬆️
src/permission/child_process_permission.cc	100.00% <100.00%> (ø)
src/permission/fs_permission.h	90.00% <ø> (ø)
src/permission/net_permission.cc	100.00% <100.00%> (ø)
src/permission/net_permission.h	100.00% <ø> (ø)
src/permission/permission.h	100.00% <ø> (ø)
src/permission/worker_permission.cc	100.00% <100.00%> (ø)
src/permission/addon_permission.cc	62.50% <0.00%> (ø)
src/permission/inspector_permission.cc	62.50% <0.00%> (ø)
src/permission/wasi_permission.cc	62.50% <0.00%> (ø)
... and 3 more

... and 465 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[mcollina]

lgtm

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/72611/

[absidue]

As mentioned in my comments on the linked issue, I feel like it should be explicitly documented that this only drops permissions and does not close currently open file handles, sockets etc, that it is expected behaviour and is the app code's responsibility to close/release those if they are no longer required.