mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-23 06:30:28 +08:00
Alexander Watson
d7f1f8052d
Integrate Z3-based formal verification for sandbox policies as openshell.prover. Detects data exfiltration paths, write bypass attacks, L7 enforcement gaps, overpermissive methods, and privilege escalation via binary capability chains. Closes #699 Signed-off-by: Alexander Watson <zredlined@gmail.com>
21 lines
639 B
Python
21 lines
639 B
Python
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
"""Root conftest for Python tests.
|
|
|
|
Pre-register openshell as a namespace package so subpackage tests (e.g.,
|
|
the prover) can run without the full Rust build that generates proto stubs.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import sys
|
|
import types
|
|
from pathlib import Path
|
|
|
|
if "openshell" not in sys.modules:
|
|
_pkg = types.ModuleType("openshell")
|
|
_pkg.__path__ = [str(Path(__file__).resolve().parent / "openshell")]
|
|
_pkg.__package__ = "openshell"
|
|
sys.modules["openshell"] = _pkg
|