viyatb-oai
5045589550
Consolidate Windows filesystem helper sandbox preparation ( #61276 )
...
## What changed
Remove `SandboxDirectSpawnTransformRequest` and `transform_for_direct_spawn` in favor of `SandboxManager::for_file_system_helpers().transform()`. Keep Windows wrapper preparation specific to filesystem helpers, and return `SandboxUnavailable` when a Windows token sandbox is requested for a filesystem helper on a non-Windows executor.
Record the helper permission entry count during launch policy preparation, before adding runtime read grants.
## Testing
Cover Windows helper executable read access and explicit workspace write grants, including empty workspace roots. Verify rejection of non-native policy working directories and Windows token helper sandboxes on Unix. Extend the helper isolation test to exercise sandboxed writes as well as reads.
GitOrigin-RevId: f95bb94e12d8d7c6e5c773644abb7b59b47ffc4a
2026-11-13 06:39:52 +00:00
..
2026-11-12 17:31:24 +00:00
2026-10-29 17:25:51 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 22:41:50 +00:00
2026-11-05 16:08:23 +00:00
2026-11-13 04:51:06 +00:00
2026-11-13 05:04:45 +00:00
2026-11-12 23:08:59 +00:00
2026-11-10 01:31:19 +00:00
2026-11-13 04:51:06 +00:00
2026-11-10 11:17:06 +00:00
2026-11-07 10:41:36 +00:00
2026-11-02 17:05:56 +00:00
2026-11-04 00:19:12 +00:00
2026-11-07 10:41:36 +00:00
2026-11-13 04:48:28 +00:00
2026-11-05 22:03:29 +00:00
2026-11-13 04:51:06 +00:00
2026-11-12 21:03:47 +00:00
2026-11-05 04:25:19 +00:00
2026-11-05 05:09:32 +00:00
2026-11-05 05:09:32 +00:00
2026-11-12 16:38:13 +00:00
2026-11-12 16:38:13 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-13 05:04:45 +00:00
2026-11-13 04:51:06 +00:00
2026-11-13 00:28:10 +00:00
2026-11-10 03:02:25 +00:00
2026-11-13 01:08:55 +00:00
2026-11-07 05:59:44 +00:00
2026-11-13 06:39:52 +00:00
2026-11-12 22:43:14 +00:00
2026-11-12 21:02:43 +00:00
2026-11-12 23:51:52 +00:00
2026-11-03 23:49:01 +00:00
2026-11-03 04:08:59 +00:00
2026-11-13 04:51:06 +00:00
2026-11-13 06:39:52 +00:00
2026-11-05 04:25:19 +00:00
2026-11-12 23:51:52 +00:00
2026-11-05 00:55:46 +00:00
2026-11-13 04:21:43 +00:00
2026-11-12 23:51:52 +00:00
2026-11-13 00:29:24 +00:00
2026-11-11 19:16:19 +00:00
2026-11-06 00:37:27 +00:00
2026-11-10 08:52:35 +00:00
2026-11-10 21:58:49 +00:00
2026-11-12 21:40:00 +00:00
2026-11-12 00:27:01 +00:00
2026-11-10 03:02:25 +00:00
2026-11-13 05:16:33 +00:00
2026-11-12 04:32:34 +00:00
2026-11-13 04:50:31 +00:00
2026-11-12 23:53:50 +00:00
2026-11-13 04:36:03 +00:00
2026-11-12 22:41:50 +00:00
2026-11-02 20:34:35 +00:00
2026-11-12 19:43:12 +00:00
2026-11-06 04:24:04 +00:00
2026-11-09 16:37:22 +00:00
2026-11-13 01:43:44 +00:00
2026-11-10 04:43:24 +00:00
2026-11-12 23:08:59 +00:00
2026-10-27 16:36:32 +00:00
2026-11-13 00:29:24 +00:00
2026-11-13 05:04:45 +00:00
2026-11-11 18:58:21 +00:00
2026-11-12 04:32:34 +00:00
2026-11-12 21:03:15 +00:00
2026-11-13 04:36:03 +00:00
2026-11-07 10:41:36 +00:00
2026-11-13 06:39:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-04 23:46:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-06 17:47:31 +00:00
2026-11-10 11:17:06 +00:00
2026-11-13 05:06:18 +00:00
2026-10-30 07:11:56 +00:00
2026-11-13 00:28:10 +00:00
2026-11-13 04:51:06 +00:00
2026-11-11 06:41:15 +00:00
2026-11-13 06:07:04 +00:00
2026-11-12 00:44:27 +00:00
2026-11-12 23:51:52 +00:00
2026-10-30 16:35:54 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-03 15:02:57 +00:00
2026-11-12 05:21:30 +00:00
2026-11-13 01:31:24 +00:00
2026-11-12 23:53:50 +00:00
2026-10-28 21:09:05 +00:00
2026-11-13 05:16:33 +00:00
2026-11-12 23:53:50 +00:00
2026-11-12 17:31:24 +00:00
2026-11-12 23:51:52 +00:00