tests/test_sandbox_credential_denies.py

• _profile · function · L42-L49 — def _profile(tmp_path, monkeypatch)
• test_the_access_token_is_denied_by_name_not_by_luck · function · L52-L56 — def test_the_access_token_is_denied_by_name_not_by_luck(tmp_path, monkeypatch)
• test_the_database_is_still_denied · function · L59-L62 — def test_the_database_is_still_denied(tmp_path, monkeypatch)
• test_share_credentials_are_denied · function · L65-L70 — def test_share_credentials_are_denied(tmp_path, monkeypatch)
• _deny_entries · function · L73-L75 — def _deny_entries(monkeypatch, tmp_path)
• _deny_paths_with_redirected_data_dir · function · L89-L96 — def _deny_paths_with_redirected_data_dir(monkeypatch, tmp_path)
• test_the_default_instance_secrets_are_denied_too · function · L99-L110 — def test_the_default_instance_secrets_are_denied_too(tmp_path, monkeypatch)
• test_the_configured_data_dir_is_still_denied · function · L113-L118 — def test_the_configured_data_dir_is_still_denied(tmp_path, monkeypatch)
• test_the_default_instance_is_not_double_listed · function · L122-L144 — def test_the_default_instance_is_not_double_listed(tmp_path, monkeypatch, spelling)
• test_the_profile_denies_the_process_info_channel · function · L171-L176 — def test_the_profile_denies_the_process_info_channel(tmp_path, monkeypatch)
• test_the_process_info_denies_come_after_allow_default · function · L179-L188 — def test_the_process_info_denies_come_after_allow_default(tmp_path, monkeypatch)
• test_the_process_info_denies_do_not_break_a_real_cell · function · L192-L231 — def test_the_process_info_denies_do_not_break_a_real_cell(tmp_path, monkeypatch)
• _start_marked_target · function · L281-L300 — def _start_marked_target(tmp_path, shape)
• _verdict · function · L303-L305 — def _verdict(completed) -> str
• test_a_sandboxed_cell_cannot_read_a_daemons_environ · function · L310-L369 — def test_a_sandboxed_cell_cannot_read_a_daemons_environ(tmp_path, monkeypatch, shape)
• _run_kernel_daemon · function · L393-L419 — def _run_kernel_daemon(tmp_path, mode)
• test_an_enforced_kernel_cannot_read_its_daemons_environ · function · L423-L441 — def test_an_enforced_kernel_cannot_read_its_daemons_environ(tmp_path)
• test_the_profile_cuts_off_securityd_not_just_the_keychain_files · function · L449-L458 — def test_the_profile_cuts_off_securityd_not_just_the_keychain_files( tmp_path, monkeypatch )
• test_the_denies_come_after_allow_default · function · L461-L470 — def test_the_denies_come_after_allow_default(tmp_path, monkeypatch)
• test_a_sandboxed_process_really_cannot_reach_the_keychain · function · L474-L497 — def test_a_sandboxed_process_really_cannot_reach_the_keychain(tmp_path, monkeypatch)
• test_certificate_validation_still_works_under_the_same_rules · function · L501-L539 — def test_certificate_validation_still_works_under_the_same_rules(tmp_path, monkeypatch)
• _bwrap · function · L547-L569 — def _bwrap(monkeypatch, tmp_path, *, fake_proc=True)
• test_the_daemon_environ_is_masked_on_linux · function · L572-L584 — def test_the_daemon_environ_is_masked_on_linux(tmp_path, monkeypatch)
• test_the_mask_comes_after_the_proc_mount · function · L587-L592 — def test_the_mask_comes_after_the_proc_mount(tmp_path, monkeypatch)
• test_the_mask_is_before_the_command_separator · function · L595-L599 — def test_the_mask_is_before_the_command_separator(tmp_path, monkeypatch)
• test_nothing_is_emitted_where_there_is_no_proc · function · L602-L607 — def test_nothing_is_emitted_where_there_is_no_proc(tmp_path, monkeypatch)
• test_the_pid_namespace_stays_shared_on_purpose · function · L610-L620 — def test_the_pid_namespace_stays_shared_on_purpose(tmp_path, monkeypatch)