openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-08-23 13:09:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Exercise restricted-token sandboxing in cyber policy tests (#39646)

Browse Source 
## What changed

Run both branches of the heuristically safe command policy test with the
Windows sandbox level set to `RestrictedToken`.

GitOrigin-RevId: ae5d754ec4a51d73a8e5f9d844f94a91f795fb72
This commit is contained in:
Dylan Hurd
2026-08-20 00:43:04 +00:00
committed by copyberry
parent af0e82c562
commit 8aaf839774
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
codex-rs/core/src/exec_policy/model_policy_tests.rs
View File

@@ -174,7 +174,7 @@ async fn cyber_policy_keeps_heuristically_safe_commands_inside_the_sandbox() {
approval_policy: AskForApproval::OnRequest,
permission_profile: PermissionProfile::read_only(),
environment_policy: None,
windows_sandbox_level: WindowsSandboxLevel::Disabled,
windows_sandbox_level: WindowsSandboxLevel::RestrictedToken,
sandbox_permissions: SandboxPermissions::UseDefault,
prefix_rule: None,
allow_prefix_rules: AllowPrefixRules::IgnoreForCyberModel,
@@ -194,7 +194,7 @@ async fn cyber_policy_keeps_heuristically_safe_commands_inside_the_sandbox() {
approval_policy: AskForApproval::OnRequest,
permission_profile: PermissionProfile::read_only(),
environment_policy: None,
windows_sandbox_level: WindowsSandboxLevel::Disabled,
windows_sandbox_level: WindowsSandboxLevel::RestrictedToken,
sandbox_permissions: SandboxPermissions::UseDefault,
prefix_rule: None,
allow_prefix_rules: AllowPrefixRules::Honor,