viyatb-oai 6b991972c5 Remove obsolete protected-path monitoring from the Linux sandbox (#54445) ...

## Why

Missing protected metadata paths already receive read-only synthetic mounts, as established in https://github.com/openai/codex/pull/39629. The fallback creation monitor no longer receives any targets because those paths are included in the read-only mount list.

## What changed

Remove `ProtectedCreateTarget` tracking and its inotify monitor, deletion fallback, registry markers, startup pipe, and policy-violation exit override. Keep synthetic mount cleanup and propagate the bubblewrap child's exit status directly.

GitOrigin-RevId: ac747860cad845ebb89ada5a9c1009e56835c4fb

2026-10-15 23:58:30 +00:00

..

bazel_bwrap.rs

Add a bubblewrap backend for sandbox integrity checks (#51840)

2026-10-07 21:50:48 +00:00

bundled_bwrap.rs

Add a bubblewrap backend for sandbox integrity checks (#51840)

2026-10-07 21:50:48 +00:00

bwrap_wslg_tests.rs

Hide WSLg's duplicate root in restricted Linux sandboxes (#45837)

2026-09-16 02:17:36 +00:00

bwrap.rs

Remove obsolete protected-path monitoring from the Linux sandbox (#54445)

2026-10-15 23:58:30 +00:00

daemon_mounts_tests.rs

Handle Btrfs device mismatches when masking daemon sockets (#47968)

2026-09-24 23:35:42 +00:00

daemon_mounts.rs

Handle Btrfs device mismatches when masking daemon sockets (#47968)

2026-09-24 23:35:42 +00:00

exec_util.rs

linux-sandbox: use standalone bundled bwrap (#21255)

2026-05-05 17:14:29 -07:00

fd_mount_tests.rs

Support FD mounts with older system Bubblewrap versions (#39404)

2026-08-19 04:06:50 +00:00

fd_mount.rs

Support FD mounts with older system Bubblewrap versions (#39404)

2026-08-19 04:06:50 +00:00

launcher.rs

Reject sandbox-writable bubblewrap executables from PATH (#51211)

2026-10-06 00:58:19 +00:00

lib.rs

Align Linux sandbox names and docs with bubblewrap and seccomp (#52610)

2026-10-09 15:29:50 +00:00

linux_run_main_tests.rs

Remove obsolete protected-path monitoring from the Linux sandbox (#54445)

2026-10-15 23:58:30 +00:00

linux_run_main.rs

Remove obsolete protected-path monitoring from the Linux sandbox (#54445)

2026-10-15 23:58:30 +00:00

main.rs

fix: overhaul how we spawn commands under seccomp/landlock on Linux (#1086)

2025-05-23 11:37:07 -07:00

proxy_lifecycle_tests.rs

Harden managed proxy listener handoff (#40999)

2026-08-26 23:41:18 +00:00

proxy_lifecycle.rs

Harden managed proxy listener handoff (#40999)

2026-08-26 23:41:18 +00:00

proxy_routing.rs

Harden managed proxy listener handoff (#40999)

2026-08-26 23:41:18 +00:00

seccomp.rs

Align Linux sandbox names and docs with bubblewrap and seccomp (#52610)

2026-10-09 15:29:50 +00:00

wslg_tests.rs

Hide WSLg's duplicate root in restricted Linux sandboxes (#45837)

2026-09-16 02:17:36 +00:00

wslg.rs

Hide WSLg's duplicate root in restricted Linux sandboxes (#45837)

2026-09-16 02:17:36 +00:00