chess c19dcd975d
Allow directory moves under global Seatbelt basename denies ( #47920 ) ...
## Why
Global deny globs such as `/**/.env` unnecessarily block directory renames and removals on macOS. Moving an ancestor does not let a matching basename escape these rules.
## What changed
Skip ancestor unlink restrictions for root-anchored recursive globs with a literal basename. Keep matching files protected and extend the deny to descendants of matching directories. Preserve ancestor protection for scoped, multi-component, and nonliteral patterns.
## Testing
Add Seatbelt tests covering directory moves and removals, continued protection after moves, symlink access, matching directory descendants, and files created after policy generation. Verify that scoped and nonliteral deny patterns still block ancestor moves.
GitOrigin-RevId: 4e8ea601e8ea98c4da5e3a3fe0d8ce2c63013bc5
2026-09-24 19:22:06 +00:00
2026-09-22 16:07:38 +00:00
2026-09-24 11:19:16 +00:00
2026-09-24 19:06:17 +00:00
2026-09-24 05:23:26 +00:00
2026-09-24 16:07:15 +00:00
2026-09-24 18:06:07 +00:00
2026-09-22 06:36:09 +00:00
2026-09-23 19:16:20 +00:00
2026-09-23 18:25:07 +00:00
2026-09-18 00:25:37 +00:00
2026-09-21 22:58:49 +00:00
2026-09-23 00:47:34 +00:00
2026-09-23 00:47:07 +00:00
2026-09-07 16:55:06 +00:00
2026-09-24 00:50:02 +00:00
2026-09-24 17:26:18 +00:00
2026-09-23 00:47:07 +00:00
2026-09-23 00:47:07 +00:00
2026-09-23 00:47:34 +00:00
2026-09-21 22:49:17 +00:00
2026-09-21 13:57:22 +00:00
2026-09-24 01:50:36 +00:00
2026-09-15 17:32:33 +00:00
2026-09-24 01:50:36 +00:00
2026-09-14 19:12:59 +00:00
2026-09-24 17:26:18 +00:00
2026-09-24 18:37:33 +00:00
2026-09-15 18:23:08 +00:00
2026-09-18 22:40:37 +00:00
2026-09-24 19:15:17 +00:00
2026-09-11 01:57:54 +00:00
2026-09-23 22:20:34 +00:00
2026-09-24 14:58:31 +00:00
2026-09-23 15:05:59 +00:00
2026-09-24 16:36:57 +00:00
2026-09-23 22:20:34 +00:00
2026-09-24 18:07:37 +00:00
2026-09-17 04:23:45 +00:00
2026-09-24 18:38:58 +00:00
2026-09-24 17:04:24 +00:00
2026-09-19 01:21:32 +00:00
2026-09-23 18:40:12 +00:00
2026-09-24 14:48:41 +00:00
2026-09-24 18:06:07 +00:00
2026-09-24 09:25:19 +00:00
2026-09-24 14:50:27 +00:00
2026-09-11 21:59:24 +00:00
2026-09-24 18:08:31 +00:00
2026-09-23 18:51:35 +00:00
2026-09-24 00:50:02 +00:00
2026-09-24 11:10:14 +00:00
2026-09-23 22:09:41 +00:00
2026-09-23 20:29:30 +00:00
2026-09-24 01:50:36 +00:00
2026-09-23 20:05:09 +00:00
2026-09-24 19:15:17 +00:00
2026-09-24 18:05:40 +00:00
2026-09-24 18:08:31 +00:00
2026-09-23 22:20:34 +00:00
2026-09-24 15:57:42 +00:00
2026-09-24 18:06:07 +00:00
2026-09-11 03:16:01 +00:00
2026-09-23 19:53:11 +00:00
2026-09-24 17:26:18 +00:00
2026-09-23 15:01:19 +00:00
2026-09-24 19:22:06 +00:00
2026-09-24 18:08:31 +00:00
2026-09-15 18:06:03 +00:00
2026-09-09 04:00:10 +00:00
2026-09-24 17:04:50 +00:00
2026-09-16 09:03:41 +00:00
2026-09-24 18:37:33 +00:00
2026-09-24 18:07:37 +00:00
2026-09-23 19:54:07 +00:00
2026-09-24 18:37:33 +00:00
2026-09-16 16:56:41 +00:00
2026-09-08 00:13:28 +00:00
2026-09-24 16:36:57 +00:00
2026-09-20 20:16:51 +00:00
2026-09-23 04:25:28 +00:00
2026-09-22 23:37:39 +00:00
2026-09-24 19:15:17 +00:00
2026-09-23 23:33:19 +00:00
2026-09-23 00:47:07 +00:00
2026-09-13 18:53:06 +00:00
2026-09-08 21:19:02 +00:00
2026-09-24 18:08:31 +00:00
2026-09-24 04:40:03 +00:00
2026-09-11 06:45:09 +00:00
chess
c19dcd975d