# Note: because numerous out-of-tree tests for JITs need executable memory,
# this policy is intentionally permissive, like the one for
# deprecated-ambient-replace-as-executable:
*

# That said, it is useful to try to at least keep inventory of what would need
# to be allowlisted if you wanted to make use of a more restrictive policy, so
# we enumerate some things below.  This list may not be exhaustive.
# Components that use VmexResource themselves
#   Virtualization
fuchsia-pkg://fuchsia.com/netemul-sandbox#meta/netemul-sandbox.cmx
fuchsia-pkg://fuchsia.com/vmm#meta/vmm.cmx
#   Dart and Flutter JITs
fuchsia-pkg://fuchsia.com/dart_jit_runner#meta/dart_jit_runner.cmx
fuchsia-pkg://fuchsia.com/dart_jit_product_runner#meta/dart_jit_product_runner.cmx
fuchsia-pkg://fuchsia.com/flutter_jit_runner#meta/flutter_jit_runner.cmx
fuchsia-pkg://fuchsia.com/flutter_jit_product_runner#meta/flutter_jit_product_runner.cmx
#   V8/Chromium JITs
# Too many to list

# Tests that involve virtualization, which transitively involve spawning an
# environment containing a VmexResource
fuchsia-pkg://fuchsia.com/guest_interaction_tests#meta/guest_interaction_service_test.cmx
fuchsia-pkg://fuchsia.com/guest_interaction_tests#meta/server_daemon_test.cmx
fuchsia-pkg://fuchsia.com/hypervisor-tests-pkg#meta/hypervisor_tests.cmx
fuchsia-pkg://fuchsia.com/netdump-integration-tests#meta/netemul-sandbox.cmx
fuchsia-pkg://fuchsia.com/netemul-dhcp-tests#meta/dhcp-validity-test.cmx
fuchsia-pkg://fuchsia.com/netstack-integration-tests#meta/netemul-sandbox.cmx
fuchsia-pkg://fuchsia.com/netstack3-tests#meta/netemul-sandbox.cmx
fuchsia-pkg://fuchsia.com/termina_integration_tests#meta/termina_integration_tests.cmx
fuchsia-pkg://fuchsia.com/virtualization-block-tests#meta/virtualization_block_tests.cmx
fuchsia-pkg://fuchsia.com/virtualization-core-tests#meta/virtualization_core_tests.cmx
fuchsia-pkg://fuchsia.com/virtualization-gpu-tests#meta/virtualization_gpu_tests.cmx
fuchsia-pkg://fuchsia.com/virtualization-input-tests#meta/virtualization_input_tests.cmx
fuchsia-pkg://fuchsia.com/virtualization-net-tests#meta/virtualization_net_tests.cmx
fuchsia-pkg://fuchsia.com/virtualization-sound-tests#meta/virtualization_sound_tests.cmx
fuchsia-pkg://fuchsia.com/virtualization-vsock-tests#meta/virtualization_vsock_tests.cmx

# Non-virtualization tests
fuchsia-pkg://fuchsia.com/blobfs-integration#meta/executable-mount.cmx
fuchsia-pkg://fuchsia.com/bootsvc-tests#meta/bootfs-loader-service-test.cmx
fuchsia-pkg://fuchsia.com/component-manager-tests#meta/component_manager_boot_env_tests.cmx
fuchsia-pkg://fuchsia.com/driver-manager-tests#meta/driver-host-loader-service-test.cmx
fuchsia-pkg://fuchsia.com/fshost-tests#meta/fshost-loader-service-test.cmx
fuchsia-pkg://fuchsia.com/loader-service-test#meta/loader-service-test.cmx
fuchsia-pkg://fuchsia.com/policy-integration-tests#meta/vmex_resource_allowed.cmx
fuchsia-pkg://fuchsia.com/fuchsia-zircon-tests#meta/fuchsia-zircon-tests.cmx