src/sys/component_manager/tests/security_policy/ambient_mark_vmo_exec/meta/test_root.cml

{
    children: [
        // Three children which are all identical except for their identity (monikers) plus the
        // fact that #policy_not_requested does not ask for job_policy_ambient_mark_vmo_exec. The
        // security policy used alongside this test has #policy_allowed alone allowlisted.
        {
            name: "policy_allowed",
            url: "fuchsia-pkg://fuchsia.com/security-policy-vmex-integration-test#meta/protected_ops.cm",
        },
        {
            name: "policy_denied",
            url: "fuchsia-pkg://fuchsia.com/security-policy-vmex-integration-test#meta/protected_ops.cm",
        },
        {
            name: "policy_not_requested",
            url: "fuchsia-pkg://fuchsia.com/security-policy-vmex-integration-test#meta/protected_ops_no_request.cm",
        },
    ],
    expose: [
        // Expose the root realm's Realm protocol so that the test logic can bind to specific
        // children.
        {
            protocol: "fuchsia.component.Realm",
            from: "framework",
        },
    ],
}