openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-09-09 15:58:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

Avoid WindowsApps read-root ACLs

Browse Source
This commit is contained in:
David Wiesen
2026-04-13 09:16:25 -07:00
parent 7c797c6544
commit 60eed433ef
1 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
codex-rs/windows-sandbox-rs/src/setup_orchestrator.rs
View File

@@ -341,16 +341,9 @@ fn profile_read_roots(user_profile: &Path) -> Vec<PathBuf> {
}
fn gather_helper_read_roots(codex_home: &Path) -> Vec<PathBuf> {
let mut roots = Vec::new();
if let Ok(exe) = std::env::current_exe()
&& let Some(dir) = exe.parent()
{
roots.push(dir.to_path_buf());
}
let helper_dir = helper_bin_dir(codex_home);
let _ = std::fs::create_dir_all(&helper_dir);
roots.push(helper_dir);
roots
vec![helper_dir]
}
fn gather_legacy_full_read_roots(
@@ -1033,6 +1026,18 @@ mod tests {
assert!(roots.contains(&expected));
}
#[test]
fn helper_read_roots_do_not_include_current_exe_dir() {
let tmp = TempDir::new().expect("tempdir");
let codex_home = tmp.path().join("codex-home");
let roots = gather_helper_read_roots(&codex_home);
let expected =
dunce::canonicalize(helper_bin_dir(&codex_home)).expect("canonical helper dir");
assert_eq!(roots, vec![expected]);
}
#[test]
fn restricted_read_roots_skip_platform_defaults_when_disabled() {
let tmp = TempDir::new().expect("tempdir");