Akram 75a18616cd refactor(policy): drop community image /app path from default policy ...

The restrictive default policy granted read-only access to /app, a directory
that only existed in the community base image. A generic Alpine default has no
/app, so remove it. Landlock best-effort already ignores absent paths; this
just stops advertising a community-specific layout in the default.

Part of #3116.

Signed-off-by: Akram
Signed-off-by: Akram <akram.benaissi@gmail.com>

2026-09-21 12:04:33 +02:00

..

src

refactor(policy): drop community image /app path from default policy

2026-09-21 12:04:33 +02:00

testdata

feat(policy): preserve exact MCP revision allowlists (#3027)

2026-09-05 04:24:49 +00:00

Cargo.toml

feat(policy): establish one canonical authored policy representation (#3334)

2026-09-16 17:36:31 +00:00