iceweasel-oai d9960e12bb
Add a bubblewrap backend for sandbox integrity checks ( #51840 ) ...
## What changed
Add Linux dependency discovery and policy preparation to `exec-server`'s sandbox integrity module. Inventory bundled and system `bwrap` candidates and the deny-glob scanner using the launcher's location and the command's `PATH` and working directory.
Resolve `:tmpdir` and tilde-prefixed deny globs using the command's `TMPDIR` and `HOME`, with account home-directory fallback. Reuse Linux sandbox helpers to expand deny globs in the command's explicit environment.
## Testing
Add Linux tests covering symlinked launchers, relative and empty `PATH` entries, and empty, relative, and tilde-prefixed `TMPDIR` values alongside home-relative deny globs.
GitOrigin-RevId: fe404fa4be77ece677b22d52d77a7234dbf0cffe
2026-10-07 21:50:48 +00:00
2026-10-02 04:02:14 +00:00
2026-10-07 12:47:04 +00:00
2026-09-30 17:33:59 +00:00
2026-10-06 21:29:35 +00:00
2026-09-30 00:51:39 +00:00
2026-10-07 19:28:14 +00:00
2026-10-06 16:56:39 +00:00
2026-10-04 06:28:20 +00:00
2026-10-07 07:57:14 +00:00
2026-10-07 06:07:47 +00:00
2026-10-06 17:26:19 +00:00
2026-10-05 23:52:06 +00:00
2026-10-05 23:52:06 +00:00
2026-09-18 00:25:37 +00:00
2026-10-06 23:44:17 +00:00
2026-09-23 00:47:34 +00:00
2026-10-02 22:20:55 +00:00
2026-09-30 18:49:29 +00:00
2026-10-07 06:07:47 +00:00
2026-10-01 22:32:29 +00:00
2026-09-29 13:58:09 +00:00
2026-09-29 03:32:19 +00:00
2026-10-05 22:18:55 +00:00
2026-10-05 22:18:55 +00:00
2026-10-06 00:36:25 +00:00
2026-10-07 16:46:43 +00:00
2026-10-06 19:13:04 +00:00
2026-09-25 00:20:02 +00:00
2026-09-24 01:50:36 +00:00
2026-09-14 19:12:59 +00:00
2026-10-07 20:47:19 +00:00
2026-10-07 01:52:09 +00:00
2026-09-15 18:23:08 +00:00
2026-10-02 22:12:07 +00:00
2026-10-07 21:28:56 +00:00
2026-10-06 23:28:55 +00:00
2026-09-23 22:20:34 +00:00
2026-10-06 22:36:22 +00:00
2026-10-07 06:07:47 +00:00
2026-10-07 21:50:48 +00:00
2026-10-07 17:59:22 +00:00
2026-10-07 19:03:52 +00:00
2026-10-06 16:56:39 +00:00
2026-10-07 21:28:56 +00:00
2026-10-07 11:18:05 +00:00
2026-10-01 09:52:54 +00:00
2026-10-07 17:59:22 +00:00
2026-10-01 15:57:03 +00:00
2026-10-07 10:33:33 +00:00
2026-10-06 15:50:27 +00:00
2026-10-01 11:01:37 +00:00
2026-10-01 22:32:29 +00:00
2026-09-29 22:24:09 +00:00
2026-10-07 21:50:48 +00:00
2026-10-02 23:26:27 +00:00
2026-09-28 14:46:32 +00:00
2026-09-28 06:30:53 +00:00
2026-10-07 18:32:50 +00:00
2026-10-02 23:26:27 +00:00
2026-10-06 01:46:33 +00:00
2026-10-07 21:16:25 +00:00
2026-10-07 11:10:20 +00:00
2026-10-07 17:28:32 +00:00
2026-10-06 21:29:35 +00:00
2026-10-06 19:30:57 +00:00
2026-10-07 21:16:25 +00:00
2026-10-01 15:57:03 +00:00
2026-09-29 01:14:41 +00:00
2026-10-07 19:28:14 +00:00
2026-10-07 07:57:14 +00:00
2026-10-07 07:57:14 +00:00
2026-10-07 21:50:48 +00:00
2026-09-24 18:08:31 +00:00
2026-10-07 21:50:48 +00:00
2026-10-07 17:17:05 +00:00
2026-10-07 17:28:32 +00:00
2026-10-02 00:46:14 +00:00
2026-10-06 19:30:57 +00:00
2026-10-07 06:34:22 +00:00
2026-10-07 14:32:44 +00:00
2026-10-07 19:42:35 +00:00
2026-10-01 18:05:05 +00:00
2026-10-03 07:14:12 +00:00
2026-10-01 15:57:03 +00:00
2026-09-23 04:25:28 +00:00
2026-09-22 23:37:39 +00:00
2026-10-07 21:16:25 +00:00
2026-10-03 03:20:37 +00:00
2026-09-23 00:47:07 +00:00
2026-10-01 15:57:03 +00:00
2026-10-07 21:50:48 +00:00
2026-10-07 20:21:35 +00:00
2026-10-02 04:02:14 +00:00
iceweasel-oai
d9960e12bb