openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-11-05 20:10:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Avoid loading Windows sandbox runner profiles

Browse Source
This commit is contained in:
David Wiesen
2026-05-08 09:40:13 -07:00
parent 0035d7bd18
commit 0b90caa393
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
codex-rs/windows-sandbox-rs/src/elevated/runner_client.rs
+4 -2
View File
@@ -36,7 +36,6 @@ use windows_sys::Win32::System::Pipes::PeekNamedPipe;
use windows_sys::Win32::System::Threading::CreateProcessWithLogonW;
use windows_sys::Win32::System::Threading::GetCurrentProcess;
use windows_sys::Win32::System::Threading::GetCurrentThread;
use windows_sys::Win32::System::Threading::LOGON_WITH_PROFILE;
use windows_sys::Win32::System::Threading::PROCESS_INFORMATION;
use windows_sys::Win32::System::Threading::STARTUPINFOW;
use windows_sys::Win32::System::Threading::TerminateProcess;
@@ -252,11 +251,14 @@ pub(crate) fn spawn_runner_transport(
let previous_error_mode = unsafe { SetErrorMode(RUNNER_ERROR_MODE_FLAGS) };
let spawn_res = unsafe {
// The broker process does not need HKCU, and loading the sandbox user's profile for each
// short-lived runner launch can leak temporary Windows profiles when the profile service
// cannot attach cleanly. Authenticate the sandbox user, but avoid LOGON_WITH_PROFILE here.
CreateProcessWithLogonW(
user_w.as_ptr(),
domain_w.as_ptr(),
password_w.as_ptr(),
LOGON_WITH_PROFILE,
0,
exe_w.as_ptr(),
cmdline_vec.as_mut_ptr(),
windows_sys::Win32::System::Threading::CREATE_NO_WINDOW