()
| 103 | // 2. Verify readable_paths. |
| 104 | #[test] |
| 105 | fn test_filesystem_policy() { |
| 106 | let path = testdata_dir().join("policy.yaml"); |
| 107 | let model = parse_policy(&path).expect("failed to parse policy"); |
| 108 | let readable = model.filesystem_policy.readable_paths(); |
| 109 | assert!(readable.contains(&"/usr".to_owned())); |
| 110 | assert!(readable.contains(&"/sandbox".to_owned())); |
| 111 | assert!(readable.contains(&"/tmp".to_owned())); |
| 112 | } |
| 113 | |
| 114 | // 3. Workdir NOT included by default (matches runtime behavior). |
| 115 | #[test] |
nothing calls this directly
no test coverage detected