From 421133c3cce600aaf4c61a3a78723439f391cc81 Mon Sep 17 00:00:00 2001 From: abhisek Date: Wed, 14 Jan 2026 21:34:01 +0530 Subject: [PATCH] fix: Path test case --- sandbox/platform/bubblewrap_translator_linux_test.go | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/sandbox/platform/bubblewrap_translator_linux_test.go b/sandbox/platform/bubblewrap_translator_linux_test.go index 755f741..8ef1244 100644 --- a/sandbox/platform/bubblewrap_translator_linux_test.go +++ b/sandbox/platform/bubblewrap_translator_linux_test.go @@ -510,8 +510,10 @@ func TestBubblewrapTranslatorProcessDenyRule(t *testing.T) { assert.Contains(t, argsStr, "/dev/null") assert.Contains(t, argsStr, testFile) - // Non-existent file should also be blocked - assert.Contains(t, argsStr, nonExistentPath) + // Non-existent file should NOT be in args (protected by deny-by-default) + // In bubblewrap, paths that are not explicitly mounted are inaccessible, + // so we don't need to add deny rules for non-existent files + assert.NotContains(t, argsStr, nonExistentPath) } func TestBubblewrapTranslatorTmpdirSupport(t *testing.T) {