openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-09-06 15:29:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Rename the read-only Seatbelt platform defaults policy (#41449)

Browse Source 
GitOrigin-RevId: b0c22d9bf9e276023d2ddd943489e51ee8bb200f
This commit is contained in:
ted nyman
2026-08-28 23:19:26 +00:00
committed by copyberry
parent a5c581e247
commit 75388bf321
3 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
codex-rs/sandboxing/BUILD.bazel
View File

@@ -3,7 +3,7 @@ load("//:defs.bzl", "codex_rust_crate")
codex_rust_crate(
name = "sandboxing",
compile_data = [
"src/restricted_read_only_platform_defaults.sbpl",
"src/seatbelt_read_only_platform_defaults.sbpl",
"src/seatbelt_base_policy.sbpl",
"src/seatbelt_network_policy.sbpl",
"src/seatbelt_preferences_policy.sbpl",

2
codex-rs/sandboxing/src/seatbelt.rs
View File

@@ -22,7 +22,7 @@ const MACOS_SEATBELT_BASE_POLICY: &str = include_str!("seatbelt_base_policy.sbpl
const MACOS_SEATBELT_NETWORK_POLICY: &str = include_str!("seatbelt_network_policy.sbpl");
const MACOS_SEATBELT_PREFERENCES_POLICY: &str = include_str!("seatbelt_preferences_policy.sbpl");
const MACOS_RESTRICTED_READ_ONLY_PLATFORM_DEFAULTS: &str =
include_str!("restricted_read_only_platform_defaults.sbpl");
include_str!("seatbelt_read_only_platform_defaults.sbpl");
// Ordinary processes need system scratch directories for compatibility, but filesystem helpers
// must not inherit scratch access beyond the paths their permission profile explicitly grants.
const MACOS_PROCESS_PLATFORM_DEFAULTS: &str = r#"

0
codex-rs/sandboxing/src/restricted_read_only_platform_defaults.sbpl → codex-rs/sandboxing/src/seatbelt_read_only_platform_defaults.sbpl
View File