Linux: ~/.bashrc readable in sandbox without being allow listed

[chrmarti]

Testing #313276

Sandbox is using AllowNetwork mode.

(Couldn't copy text from the VM.)

[chrmarti]

It looks like this ran in the home folder and that made . allow list it? It correctly fails when I first open a workspace folder. Is . matching the home folder too permissive? The user likely isn't aware that this is the case and it can expose PATs and other secrets.