Strip installed-tests from published run times
We sadly install tests and ship them in our Platform run time, which is wrong on many, many layers, but more importantly: libraries like gdk-pixbuf have a bunch of invalid files for their conformance test suite—and the plan is to add more, not less, in order to do fuzzying. Those tests will trip up any vulnerability scanner, and scare people.
We should definitely skip /usr/libexec/installed-tests
from org.gnome.Platform; we might decide to keep it for org.gnome.Sdk, but I don't think installed tests are useful for consumers of the run time, as they are only ever useful for OS integrators.
The following locations should not be available in our run times:
-
/usr/libexec/installed-tests
-
/usr/share/installed-tests