fix: Refactor bwrap sandbox to use common dangerous files

This commit is contained in:
Abhisek Datta
2026-01-14 21:25:27 +05:30
parent 0eec922a15
commit eeaac7c3bc
6 changed files with 57 additions and 116 deletions
@@ -449,11 +449,6 @@ func TestBubblewrapConfigDefaults(t *testing.T) {
assert.True(t, config.unsharePID)
assert.True(t, config.unshareIPC)
assert.True(t, config.dieWithParent)
// Mandatory deny patterns
assert.NotEmpty(t, config.mandatoryDenyPatterns)
assert.Contains(t, config.mandatoryDenyPatterns, ".env")
assert.Contains(t, config.mandatoryDenyPatterns, ".ssh")
}
func TestBubblewrapConfigEssentialPaths(t *testing.T) {