()
| 128 | // 4. Workdir excluded when include_workdir: false. |
| 129 | #[test] |
| 130 | fn test_include_workdir_false() { |
| 131 | let yaml = r" |
| 132 | version: 1 |
| 133 | filesystem_policy: |
| 134 | include_workdir: false |
| 135 | read_only: |
| 136 | - /usr |
| 137 | "; |
| 138 | let model = policy::parse_policy_str(yaml).expect("parse"); |
| 139 | let readable = model.filesystem_policy.readable_paths(); |
| 140 | assert!(!readable.contains(&"/sandbox".to_owned())); |
| 141 | } |
| 142 | |
| 143 | // 5. No duplicate when workdir already in read_write. |
| 144 | #[test] |
nothing calls this directly
no test coverage detected