()
| 1660 | |
| 1661 | #[test] |
| 1662 | fn validate_rejects_uid_zero() { |
| 1663 | let mut policy = restrictive_default_policy(); |
| 1664 | policy.process = Some(ProcessPolicy { |
| 1665 | run_as_user: "0".into(), |
| 1666 | run_as_group: "0".into(), |
| 1667 | }); |
| 1668 | let violations = validate_sandbox_policy(&policy).unwrap_err(); |
| 1669 | assert_eq!(violations.len(), 2); |
| 1670 | } |
| 1671 | |
| 1672 | #[test] |
| 1673 | fn validate_rejects_non_sandbox_user() { |
nothing calls this directly
no test coverage detected