jif 1dac3d9ca0
Fail closed on unsafe Linux unreadable globs ( #38026 ) ...
## Why
Linux sandbox unreadable globs without a non-root directory prefix cannot be safely expanded because they would require scanning from `/`. Silently skipping these patterns leaves the requested deny-read rule unenforced.
## What changed
Return a fatal sandbox construction error when an unreadable glob cannot be split into a safe ripgrep search root. The error directs callers to use a pattern with a non-root directory prefix.
## Testing
Add a regression test confirming that `/**/*.env` rejects Bubblewrap command construction.
GitOrigin-RevId: 2f3cb398d39a9bc077d3a1b74e08dc506d239e60
2026-08-11 15:52:59 +00:00
2026-07-29 13:53:15 +00:00
2026-07-23 19:19:35 +00:00
2026-07-21 22:44:43 +00:00
2026-08-11 15:40:52 +00:00
2026-07-29 13:53:15 +00:00
2026-08-11 15:40:52 +00:00
2026-08-04 15:23:43 +00:00
2026-07-21 08:50:21 +00:00
2026-08-11 15:40:52 +00:00
2026-07-30 19:47:30 +00:00
2026-08-10 03:28:19 +00:00
2026-07-29 18:29:26 +00:00
2026-08-10 18:44:58 +00:00
2026-08-10 01:39:55 +00:00
2026-07-30 21:49:53 +00:00
2026-08-11 03:39:02 +00:00
2026-08-04 22:23:40 +00:00
2026-08-10 19:26:52 +00:00
2026-08-11 01:05:48 +00:00
2026-08-05 18:09:26 +00:00
2026-07-21 08:28:51 +00:00
2026-08-08 16:58:26 +00:00
2026-08-11 03:06:53 +00:00
2026-08-07 23:27:39 +00:00
2026-08-05 16:09:01 +00:00
2026-08-10 21:50:55 +00:00
2026-07-30 21:49:53 +00:00
2026-08-07 18:33:46 +00:00
2026-08-11 09:22:50 +00:00
2026-08-04 22:58:02 +00:00
2026-08-11 13:52:48 +00:00
2026-08-07 00:23:38 +00:00
2026-08-03 11:39:51 +00:00
2026-08-11 15:40:52 +00:00
2026-08-11 10:43:11 +00:00
2026-08-10 14:25:13 +00:00
2026-08-07 11:30:17 +00:00
2026-08-10 19:26:52 +00:00
2026-08-11 15:33:52 +00:00
2026-08-09 03:05:10 +00:00
2026-07-20 06:13:29 +00:00
2026-08-11 15:40:52 +00:00
2026-08-10 19:26:52 +00:00
2026-08-11 13:52:48 +00:00
2026-08-07 19:56:29 +00:00
2026-07-31 21:37:56 +00:00
2026-07-23 23:35:29 +00:00
2026-08-10 15:50:53 +00:00
2026-08-10 19:26:52 +00:00
2026-08-10 11:22:55 +00:00
2026-08-07 18:33:46 +00:00
2026-08-10 22:12:14 +00:00
2026-08-11 15:52:59 +00:00
2026-07-22 04:17:34 +00:00
2026-08-07 02:30:18 +00:00
2026-08-06 03:11:42 +00:00
2026-08-10 19:26:52 +00:00
2026-07-17 20:52:42 +00:00
2026-08-05 14:20:59 +00:00
2026-08-04 22:07:56 +00:00
2026-08-05 20:03:13 +00:00
2026-08-10 22:28:15 +00:00
2026-07-30 04:26:36 +00:00
2026-08-10 19:53:01 +00:00
2026-08-10 14:25:13 +00:00
2026-07-22 19:14:11 +00:00
2026-08-11 15:40:52 +00:00
2026-08-07 18:33:46 +00:00
2026-08-10 18:40:02 +00:00
2026-08-10 23:32:42 +00:00
2026-08-06 03:11:42 +00:00
2026-08-10 19:57:40 +00:00
2026-08-10 15:43:10 +00:00
2026-08-08 16:58:26 +00:00
2026-08-08 16:58:26 +00:00
2026-08-10 06:47:21 +00:00
2026-08-10 23:32:42 +00:00
2026-08-04 03:49:53 +00:00
2026-08-11 13:52:48 +00:00
2026-08-11 15:40:52 +00:00
2026-08-05 20:03:13 +00:00
2026-08-11 15:40:52 +00:00
2026-08-10 14:25:13 +00:00
2026-07-22 16:18:08 +00:00
2026-07-24 00:16:42 +00:00
2026-08-10 19:57:40 +00:00
2026-08-08 17:18:02 +00:00
2026-08-11 15:40:52 +00:00
2026-08-11 03:39:02 +00:00
2026-07-28 20:49:22 +00:00
2026-07-29 13:53:15 +00:00
2026-07-30 04:26:36 +00:00
1dac3d9ca0