test(boot): the sandbox record folder is a forbidden root

This commit is contained in:
esengine committed 2026-10-19 19:54:07 -07:00
1 parent 9bb02269b2
commit 17fa87d048
1 file changed
+1 -1
+1 -1
View File
@@ -4161,7 +4161,7 @@ func TestRuntimeForbidReadRootsAddsOnlyGlobalCredentialFile(t *testing.T) {
cfg := config.Default()
cfg.Sandbox.ForbidRead = []string{configured}
withoutCredentials := RuntimeForbidReadRoots(cfg, ".")
hostSecrets := append(secrets.HostSecretPaths(), cfg.Roots().RemoteStateDir(), cfg.Roots().ScheduleDir(), cfg.Roots().PeersDir())
hostSecrets := append(secrets.HostSecretPaths(), cfg.Roots().RemoteStateDir(), cfg.Roots().ScheduleDir(), cfg.Roots().PeersDir(), cfg.Roots().SandboxDir())
if !reflect.DeepEqual(withoutCredentials, appendUniquePaths([]string{configured}, hostSecrets...)) {
t.Fatalf("roots without global credentials = %v", withoutCredentials)
}