viyatb-oai ac9b5b8380 Ignore ripgrep configuration when expanding sandbox deny globs (#51527) ...

## Why

User ripgrep configuration can suppress the file list used to construct Linux sandbox deny masks. For example, `--quiet` in `RIPGREP_CONFIG_PATH` can leave files matching deny globs unmasked.

## What changed

Pass `--no-config` to the ripgrep invocation that expands denied-file globs.

## Testing

Extend the multiple-denied-files regression test with a ripgrep configuration containing `--quiet`, checking that denied files remain unreadable and unwritable while allowed files remain accessible. Skip the ripgrep-specific case when no protected `rg` executable is available.

GitOrigin-RevId: 06a6e27e0edec92e79e99af5144b57f86079953f

2026-10-07 00:51:24 +00:00

..

bundled_bwrap.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

bwrap_path.rs

Reject sandbox-writable bubblewrap executables from PATH (#51211)

2026-10-06 00:58:19 +00:00

daemon_sockets_tests.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

denied_files_tests.rs

Ignore ripgrep configuration when expanding sandbox deny globs (#51527)

2026-10-07 00:51:24 +00:00

landlock.rs

Fix Linux sandbox startup with multiple denied files (#50059)

2026-10-01 18:05:33 +00:00

managed_proxy_unix_sockets_tests.rs

Share platform identity across path, network, and sandbox configuration (#46334)

2026-09-18 00:51:34 +00:00

managed_proxy.rs

Reject sandbox-writable bubblewrap executables from PATH (#51211)

2026-10-06 00:58:19 +00:00

mod.rs

Reject sandbox-writable bubblewrap executables from PATH (#51211)

2026-10-06 00:58:19 +00:00

nested_metadata_tests.rs

Protect .aws directories under sandbox writable roots (#48176)

2026-09-25 19:14:31 +00:00

root_metadata_tests.rs

Reject sandbox-writable bubblewrap executables from PATH (#51211)

2026-10-06 00:58:19 +00:00

wslg_tests.rs

Hide WSLg's duplicate root in restricted Linux sandboxes (#45837)

2026-09-16 02:17:36 +00:00