From 75388bf321bffeda40e41dca2061c1cd72c2f4d4 Mon Sep 17 00:00:00 2001 From: ted nyman Date: Fri, 28 Aug 2026 23:19:26 +0000 Subject: [PATCH] Rename the read-only Seatbelt platform defaults policy (#41449) GitOrigin-RevId: b0c22d9bf9e276023d2ddd943489e51ee8bb200f --- codex-rs/sandboxing/BUILD.bazel | 2 +- codex-rs/sandboxing/src/seatbelt.rs | 2 +- ..._defaults.sbpl => seatbelt_read_only_platform_defaults.sbpl} | 0 3 files changed, 2 insertions(+), 2 deletions(-) rename codex-rs/sandboxing/src/{restricted_read_only_platform_defaults.sbpl => seatbelt_read_only_platform_defaults.sbpl} (100%) diff --git a/codex-rs/sandboxing/BUILD.bazel b/codex-rs/sandboxing/BUILD.bazel index b9117606d3..5cdc37b747 100644 --- a/codex-rs/sandboxing/BUILD.bazel +++ b/codex-rs/sandboxing/BUILD.bazel @@ -3,7 +3,7 @@ load("//:defs.bzl", "codex_rust_crate") codex_rust_crate( name = "sandboxing", compile_data = [ - "src/restricted_read_only_platform_defaults.sbpl", + "src/seatbelt_read_only_platform_defaults.sbpl", "src/seatbelt_base_policy.sbpl", "src/seatbelt_network_policy.sbpl", "src/seatbelt_preferences_policy.sbpl", diff --git a/codex-rs/sandboxing/src/seatbelt.rs b/codex-rs/sandboxing/src/seatbelt.rs index ca11e5b9cf..ab60605015 100644 --- a/codex-rs/sandboxing/src/seatbelt.rs +++ b/codex-rs/sandboxing/src/seatbelt.rs @@ -22,7 +22,7 @@ const MACOS_SEATBELT_BASE_POLICY: &str = include_str!("seatbelt_base_policy.sbpl const MACOS_SEATBELT_NETWORK_POLICY: &str = include_str!("seatbelt_network_policy.sbpl"); const MACOS_SEATBELT_PREFERENCES_POLICY: &str = include_str!("seatbelt_preferences_policy.sbpl"); const MACOS_RESTRICTED_READ_ONLY_PLATFORM_DEFAULTS: &str = - include_str!("restricted_read_only_platform_defaults.sbpl"); + include_str!("seatbelt_read_only_platform_defaults.sbpl"); // Ordinary processes need system scratch directories for compatibility, but filesystem helpers // must not inherit scratch access beyond the paths their permission profile explicitly grants. const MACOS_PROCESS_PLATFORM_DEFAULTS: &str = r#" diff --git a/codex-rs/sandboxing/src/restricted_read_only_platform_defaults.sbpl b/codex-rs/sandboxing/src/seatbelt_read_only_platform_defaults.sbpl similarity index 100% rename from codex-rs/sandboxing/src/restricted_read_only_platform_defaults.sbpl rename to codex-rs/sandboxing/src/seatbelt_read_only_platform_defaults.sbpl