iceweasel-oai 60888d0868 Add a native Windows MXC sandbox adapter (#42841) ...

## What changed

- Add `codex-mxc-sandbox` with native MXC availability detection and a launcher that inherits standard I/O and waits for the sandboxed process.
- Reject unsupported learning-mode and fallback policies, and verify deny-path support before launch.
- Route the existing Windows MXC availability metric through the new crate and move its Windows linking dependencies alongside the adapter.

GitOrigin-RevId: e2a220b85718e00b0e710c30bbe66b6c56958176

2026-09-04 20:09:04 +00:00

..

bwrap_tests.rs

Fix rust-ci-full failures due to missing bwrap (#21604)

2026-05-08 09:52:19 -07:00

bwrap.rs

Fix rust-ci-full failures due to missing bwrap (#21604)

2026-05-08 09:52:19 -07:00

denial.rs

Sandbox remote apply_patch operations (#38043)

2026-08-11 17:47:22 +00:00

landlock_tests.rs

Enforce configured network proxy in codex sandbox (#27035)

2026-06-08 14:03:37 -07:00

landlock.rs

Enforce configured network proxy in codex sandbox (#27035)

2026-06-08 14:03:37 -07:00

lib.rs

Record Windows MXC availability (#42094)

2026-09-01 16:40:05 +00:00

manager_tests.rs

Preserve SystemRoot for Windows sandbox wrapper setup (#42833)

2026-09-04 19:22:34 +00:00

manager.rs

Preserve SystemRoot for Windows sandbox wrapper setup (#42833)

2026-09-04 19:22:34 +00:00

policy_transforms_tests.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

policy_transforms.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

seatbelt_base_policy.sbpl

Allow semaphore limit queries in the macOS sandbox (#39976)

2026-08-21 17:16:51 +00:00

seatbelt_network_policy.sbpl

[sandboxing] Remove Darwin user cache write from Seatbelt network policy (#21443)

2026-05-08 16:43:07 +00:00

seatbelt_preferences_policy.sbpl

Restrict macOS preference reads to full-disk policies (#39811)

2026-08-20 23:18:55 +00:00

seatbelt_read_only_platform_defaults.sbpl

Rename the read-only Seatbelt platform defaults policy (#41449)

2026-08-29 02:49:33 +00:00

seatbelt_tests.rs

Allow trusted symlinks beneath CODEX_HOME on macOS (#42716)

2026-09-04 10:12:03 +00:00

seatbelt.rs

Allow trusted symlinks beneath CODEX_HOME on macOS (#42716)

2026-09-04 10:12:03 +00:00

spawn.rs

Respond to terminal queries from TTY subprocesses (#41436)

2026-08-28 23:34:37 +00:00

terminal_queries_tests.rs

Respond to terminal queries from TTY subprocesses (#41436)

2026-08-28 23:34:37 +00:00

terminal_queries.rs

Respond to terminal queries from TTY subprocesses (#41436)

2026-08-28 23:34:37 +00:00

violation_tests.rs

Record normalized sandbox violation events (#36207)

2026-07-30 19:23:33 +00:00

violation.rs

Record normalized sandbox violation events (#36207)

2026-07-30 19:23:33 +00:00

windows_mxc.rs

Add a native Windows MXC sandbox adapter (#42841)

2026-09-04 20:09:04 +00:00

windows.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00