iceweasel-oai d117c2eb02
Expand MXC volume grants and resolve deny globs ( #44289 ) ...
## Why
MXC volume-root grants are nonrecursive, and filesystem deny globs were rejected before launch.
## What changed
- Expand volume-root grants to include existing immediate children, preserving read-only carveouts and denies. Children created directly under a volume root after policy construction are not granted access.
- Normalize filesystem object aliases before and after expansion so generated grants preserve tighter access restrictions.
- Skip unavailable volumes and uninspectable generated children.
- Resolve deny globs into concrete file and directory paths using the Windows sandbox resolver.
## Testing
Add regression tests for read-only children and aliases, normalized root access, uninspectable children, and deny glob expansion alongside explicit denies.
GitOrigin-RevId: 3242e9a30d16581d6fe5b7b6e39e0e0f71ca6ef4
2026-09-09 20:02:40 +00:00
2026-07-29 13:53:15 +00:00
2026-09-05 18:06:26 +00:00
2026-07-23 19:19:35 +00:00
2026-08-24 22:40:35 +00:00
2026-09-09 18:40:53 +00:00
2026-07-29 13:53:15 +00:00
2026-09-09 19:22:22 +00:00
2026-09-07 19:34:23 +00:00
2026-09-07 19:51:53 +00:00
2026-09-09 17:55:00 +00:00
2026-07-30 19:47:30 +00:00
2026-09-03 06:02:25 +00:00
2026-09-07 00:00:23 +00:00
2026-08-20 08:10:08 +00:00
2026-08-31 13:44:12 +00:00
2026-08-31 13:44:12 +00:00
2026-09-03 23:20:54 +00:00
2026-09-09 03:17:48 +00:00
2026-09-02 21:50:51 +00:00
2026-09-07 16:55:06 +00:00
2026-08-14 05:03:39 +00:00
2026-08-17 22:37:14 +00:00
2026-09-09 19:22:22 +00:00
2026-09-02 20:07:11 +00:00
2026-09-03 01:46:37 +00:00
2026-08-28 19:44:50 +00:00
2026-08-29 02:52:58 +00:00
2026-09-01 17:17:45 +00:00
2026-09-01 01:00:50 +00:00
2026-09-08 17:51:40 +00:00
2026-09-09 18:40:53 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 23:13:37 +00:00
2026-08-25 21:20:51 +00:00
2026-09-09 10:51:24 +00:00
2026-09-05 01:25:06 +00:00
2026-09-09 19:31:12 +00:00
2026-08-31 21:27:51 +00:00
2026-09-08 19:56:25 +00:00
2026-09-04 23:56:25 +00:00
2026-09-09 19:38:24 +00:00
2026-09-03 23:20:54 +00:00
2026-09-02 18:34:27 +00:00
2026-08-07 11:30:17 +00:00
2026-09-05 12:17:32 +00:00
2026-09-07 17:09:04 +00:00
2026-09-09 17:03:57 +00:00
2026-09-07 16:55:06 +00:00
2026-08-17 04:37:50 +00:00
2026-09-09 17:59:10 +00:00
2026-09-02 15:07:11 +00:00
2026-09-09 18:40:53 +00:00
2026-09-09 15:12:19 +00:00
2026-07-31 21:37:56 +00:00
2026-08-27 20:44:47 +00:00
2026-09-06 20:52:29 +00:00
2026-09-09 15:48:39 +00:00
2026-09-09 17:55:00 +00:00
2026-09-09 19:49:47 +00:00
2026-09-08 19:40:43 +00:00
2026-09-01 15:12:53 +00:00
2026-09-09 19:43:41 +00:00
2026-09-07 17:26:10 +00:00
2026-09-08 14:23:23 +00:00
2026-09-09 03:17:48 +00:00
2026-09-09 03:17:48 +00:00
2026-09-09 17:56:33 +00:00
2026-09-09 20:02:40 +00:00
2026-09-09 17:45:17 +00:00
2026-07-30 04:26:36 +00:00
2026-09-09 15:48:39 +00:00
2026-09-01 17:17:45 +00:00
2026-09-05 12:08:18 +00:00
2026-08-25 15:50:19 +00:00
2026-09-09 01:19:07 +00:00
2026-09-07 20:25:30 +00:00
2026-08-26 17:45:42 +00:00
2026-08-21 16:45:05 +00:00
2026-09-09 17:42:20 +00:00
2026-09-09 17:31:15 +00:00
2026-08-28 01:14:02 +00:00
2026-09-04 20:09:04 +00:00
2026-08-10 15:43:10 +00:00
2026-09-09 06:04:59 +00:00
2026-09-09 04:00:10 +00:00
2026-09-05 05:21:42 +00:00
2026-09-09 00:18:35 +00:00
2026-09-02 18:34:27 +00:00
2026-09-08 04:35:21 +00:00
2026-09-09 12:30:07 +00:00
2026-09-09 17:55:00 +00:00
2026-09-09 18:11:39 +00:00
2026-09-02 18:42:06 +00:00
2026-09-08 00:13:28 +00:00
2026-09-09 17:55:00 +00:00
2026-09-08 04:55:29 +00:00
2026-09-03 20:01:07 +00:00
2026-09-09 19:31:12 +00:00
2026-09-02 22:19:51 +00:00
2026-08-15 14:31:04 +00:00
2026-09-08 23:37:26 +00:00
2026-09-08 21:19:02 +00:00
2026-09-09 20:02:40 +00:00
2026-09-09 17:31:37 +00:00
2026-07-28 20:49:22 +00:00
2026-07-29 13:53:15 +00:00
2026-09-04 05:07:02 +00:00
iceweasel-oai
d117c2eb02