jif 19d185fec8
Add safe permission profile intersection ( #39242 ) ...
## What changed
- Add `intersect_effective_permission_profiles` to derive the permissions shared by an authority profile and a requested profile.
- Preserve the more restrictive filesystem access, read denials, protected metadata paths, temporary-directory access, and network policy.
- Canonicalize concrete paths so symlinks cannot expand authority, and fail closed for policy shapes that cannot be intersected safely.
## Testing
Add coverage for workspace intersections, nested carveouts, deny patterns, unsupported policies, temporary-directory restrictions, symlink escapes, and macOS path aliases.
GitOrigin-RevId: a35bdc47e41afad13630f92c032514b300c14a0d
2026-08-18 17:53:36 +00:00
2026-08-17 04:01:37 +00:00
2026-08-18 16:05:51 +00:00
2026-08-18 00:45:00 +00:00
2026-08-18 12:37:41 +00:00
2026-08-17 04:01:37 +00:00
2026-08-16 06:48:59 +00:00
2026-08-10 18:44:58 +00:00
2026-08-10 01:39:55 +00:00
2026-08-17 13:20:58 +00:00
2026-08-11 03:39:02 +00:00
2026-08-14 05:03:39 +00:00
2026-08-17 22:37:14 +00:00
2026-08-18 06:25:56 +00:00
2026-08-13 19:35:22 +00:00
2026-08-13 19:35:22 +00:00
2026-08-14 20:42:35 +00:00
2026-08-15 21:26:28 +00:00
2026-08-14 22:40:19 +00:00
2026-08-15 01:34:33 +00:00
2026-08-13 23:13:37 +00:00
2026-08-18 12:37:41 +00:00
2026-08-18 05:30:11 +00:00
2026-08-07 00:23:38 +00:00
2026-08-18 16:38:52 +00:00
2026-08-17 19:22:45 +00:00
2026-08-18 17:42:48 +00:00
2026-08-07 11:30:17 +00:00
2026-08-13 00:00:16 +00:00
2026-08-18 06:22:04 +00:00
2026-08-18 17:18:50 +00:00
2026-08-17 21:49:30 +00:00
2026-08-17 04:37:50 +00:00
2026-08-18 17:48:35 +00:00
2026-08-18 16:05:51 +00:00
2026-08-17 18:41:50 +00:00
2026-08-07 19:56:29 +00:00
2026-08-17 21:49:30 +00:00
2026-08-10 15:50:53 +00:00
2026-08-18 12:37:41 +00:00
2026-08-17 04:17:45 +00:00
2026-08-17 00:09:44 +00:00
2026-08-10 22:12:14 +00:00
2026-08-17 23:21:28 +00:00
2026-08-17 22:26:27 +00:00
2026-08-17 10:01:59 +00:00
2026-08-18 14:14:57 +00:00
2026-08-18 15:06:09 +00:00
2026-08-14 01:23:59 +00:00
2026-08-17 23:08:26 +00:00
2026-08-17 19:22:45 +00:00
2026-08-17 19:06:53 +00:00
2026-08-10 14:25:13 +00:00
2026-08-17 21:49:30 +00:00
2026-08-18 17:53:36 +00:00
2026-08-15 01:34:33 +00:00
2026-08-17 23:04:09 +00:00
2026-08-18 12:37:41 +00:00
2026-08-17 21:49:30 +00:00
2026-08-10 15:43:10 +00:00
2026-08-18 14:59:43 +00:00
2026-08-08 16:58:26 +00:00
2026-08-18 03:31:06 +00:00
2026-08-18 05:46:08 +00:00
2026-08-18 00:45:00 +00:00
2026-08-18 12:37:41 +00:00
2026-08-14 05:49:33 +00:00
2026-08-18 12:37:41 +00:00
2026-08-17 21:49:30 +00:00
2026-08-17 21:49:30 +00:00
2026-08-15 14:31:04 +00:00
2026-08-18 14:59:43 +00:00
2026-08-18 14:59:43 +00:00
2026-08-11 23:40:07 +00:00
jif
19d185fec8