image-policy: add support for restricting to specific filesystems

2025-12-19 09:17:41 +00:00
parent bc3f700a4a
commit d0cb79b8a9
5 changed files with 110 additions and 9 deletions
@@ -92,6 +92,10 @@ TEST_RET(test_image_policy_to_string) {
        test_policy_string("swap=open:root=signed+read-only-on+growfs-off:=absent");
        test_policy_string("=-");
        test_policy_string("=");
+        test_policy_string("root=ext4+squashfs+verity");
+        test_policy_string("usr=encrypted+erofs+read-only-off");
+        test_policy_string("home=unprotected+btrfs");
+        test_policy_string("=vfat+erofs");

        test_policy_equiv("", image_policy_equiv_ignore);
        test_policy_equiv("-", image_policy_equiv_ignore);