viyatb-oai af2e52c858 Fail closed on unreadable glob search root metadata errors (#57186) ...

## Why

Linux sandbox deny-glob expansion silently skipped search roots when metadata lookup failed, potentially discarding a deny rule.

## What changed

Return a fatal error with the search root and underlying error when metadata lookup fails, except for missing or non-directory roots, which still have no matches. Continue following directory symlinks.

## Testing

Add regression tests for symlink-loop metadata errors stopping expansion before scanning, absent and non-directory roots being skipped, and symlink roots expanding to both logical and canonical paths without ripgrep.

GitOrigin-RevId: bd97804ec5b599376c525addaacce6b1f29f9895

2026-10-26 18:31:21 +00:00

..

bazel_bwrap.rs

Add a bubblewrap backend for sandbox integrity checks (#51840)

2026-10-07 21:50:48 +00:00

bundled_bwrap_tests.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

bundled_bwrap.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

bwrap_tests.rs

Fail closed on unreadable glob search root metadata errors (#57186)

2026-10-26 18:31:21 +00:00

bwrap_wslg_tests.rs

Hide WSLg's duplicate root in restricted Linux sandboxes (#45837)

2026-09-16 02:17:36 +00:00

bwrap.rs

Fail closed on unreadable glob search root metadata errors (#57186)

2026-10-26 18:31:21 +00:00

daemon_mounts_tests.rs

Handle Btrfs device mismatches when masking daemon sockets (#47968)

2026-09-24 23:35:42 +00:00

daemon_mounts.rs

Handle Btrfs device mismatches when masking daemon sockets (#47968)

2026-09-24 23:35:42 +00:00

exec_util_tests.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

exec_util.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

fd_mount_tests.rs

Make sandbox mount cleanup tests tolerate file descriptor reuse (#56454)

2026-10-23 12:08:11 +00:00

fd_mount.rs

Support FD mounts with older system Bubblewrap versions (#39404)

2026-08-19 04:06:50 +00:00

launcher_tests.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

launcher.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

lib.rs

Align Linux sandbox names and docs with bubblewrap and seccomp (#52610)

2026-10-09 15:29:50 +00:00

linux_run_main_tests.rs

Remove obsolete protected-path monitoring from the Linux sandbox (#54445)

2026-10-15 23:58:30 +00:00

linux_run_main.rs

Remove obsolete protected-path monitoring from the Linux sandbox (#54445)

2026-10-15 23:58:30 +00:00

main.rs

…

proxy_lifecycle_tests.rs

Harden managed proxy listener handoff (#40999)

2026-08-26 23:41:18 +00:00

proxy_lifecycle.rs

Harden managed proxy listener handoff (#40999)

2026-08-26 23:41:18 +00:00

proxy_routing_tests.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

proxy_routing.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

seccomp_tests.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

seccomp.rs

Move Linux sandbox unit tests into separate files (#55620)

2026-10-20 16:25:02 +00:00

wslg_tests.rs

Hide WSLg's duplicate root in restricted Linux sandboxes (#45837)

2026-09-16 02:17:36 +00:00

wslg.rs

Hide WSLg's duplicate root in restricted Linux sandboxes (#45837)

2026-09-16 02:17:36 +00:00