viyatb-oai 5667598c8d
Use resolved filesystem permissions in Windows sandbox policies ( #59233 ) ...
## What changed
Use `resolve_for_enforcement` when preparing Windows restricted-token and elevated sandbox overrides, preserving read-only carveouts at volume roots. Expand deny-read ACL targets from the resolved permissions.
Use the same resolution in MXC policy preparation when volume roots do not require materialization, while retaining special handling for symbolic root denies.
## Testing
Add regression coverage for read-only carveouts in a volume-root workspace. Extend the Windows package smoke test to verify that a helper-created log matching a deny glob cannot be read while a neighboring allowed file remains readable.
GitOrigin-RevId: cee0834444464b3a7b0c8dbeecb8abcd5828b4b0
2026-11-03 21:23:50 +00:00
2026-10-30 18:02:30 +00:00
2026-10-29 17:25:51 +00:00
2026-11-03 15:02:57 +00:00
2026-11-03 12:33:26 +00:00
2026-11-02 20:57:23 +00:00
2026-11-03 15:02:57 +00:00
2026-10-29 11:23:51 +00:00
2026-11-03 04:20:50 +00:00
2026-11-03 11:14:59 +00:00
2026-11-02 16:00:20 +00:00
2026-11-03 02:26:29 +00:00
2026-11-02 17:05:56 +00:00
2026-10-26 20:26:32 +00:00
2026-10-27 22:59:22 +00:00
2026-10-22 19:36:47 +00:00
2026-10-27 17:04:16 +00:00
2026-10-26 21:08:15 +00:00
2026-11-03 21:02:34 +00:00
2026-11-03 18:11:16 +00:00
2026-10-30 02:28:51 +00:00
2026-10-20 15:43:19 +00:00
2026-10-29 16:57:12 +00:00
2026-10-29 16:57:12 +00:00
2026-10-29 01:04:48 +00:00
2026-10-29 01:04:48 +00:00
2026-11-03 21:02:34 +00:00
2026-10-19 21:43:19 +00:00
2026-11-03 01:59:24 +00:00
2026-11-03 18:55:44 +00:00
2026-10-30 20:39:47 +00:00
2026-10-29 18:24:34 +00:00
2026-11-03 21:02:34 +00:00
2026-11-03 15:02:57 +00:00
2026-10-19 15:15:17 +00:00
2026-11-03 06:37:07 +00:00
2026-10-27 05:52:01 +00:00
2026-10-26 19:19:10 +00:00
2026-11-03 04:08:59 +00:00
2026-11-02 20:36:39 +00:00
2026-11-02 21:09:09 +00:00
2026-10-30 14:56:08 +00:00
2026-10-27 23:53:09 +00:00
2026-10-30 18:20:57 +00:00
2026-11-03 21:02:34 +00:00
2026-10-28 21:22:06 +00:00
2026-11-03 09:51:25 +00:00
2026-10-22 19:36:47 +00:00
2026-10-22 19:36:47 +00:00
2026-10-27 23:53:09 +00:00
2026-10-26 20:40:53 +00:00
2026-11-03 13:32:14 +00:00
2026-11-03 02:08:56 +00:00
2026-10-26 19:21:08 +00:00
2026-11-01 15:50:50 +00:00
2026-10-22 19:36:47 +00:00
2026-11-03 21:22:21 +00:00
2026-11-03 15:02:57 +00:00
2026-11-03 15:02:57 +00:00
2026-10-22 19:36:47 +00:00
2026-11-03 12:33:26 +00:00
2026-11-02 20:34:35 +00:00
2026-10-22 19:36:47 +00:00
2026-11-03 15:02:57 +00:00
2026-11-02 08:31:14 +00:00
2026-11-03 15:02:57 +00:00
2026-11-03 21:23:50 +00:00
2026-10-26 18:22:40 +00:00
2026-11-03 00:59:43 +00:00
2026-10-27 16:36:32 +00:00
2026-11-03 01:58:18 +00:00
2026-11-03 21:02:34 +00:00
2026-11-03 21:02:34 +00:00
2026-10-19 16:56:42 +00:00
2026-11-03 01:59:24 +00:00
2026-11-03 21:22:21 +00:00
2026-10-30 14:40:32 +00:00
2026-11-03 15:02:57 +00:00
2026-11-03 21:23:50 +00:00
2026-10-27 05:52:01 +00:00
2026-10-22 04:59:19 +00:00
2026-10-27 05:52:01 +00:00
2026-10-29 17:49:51 +00:00
2026-11-03 02:26:29 +00:00
2026-10-22 00:19:02 +00:00
2026-10-30 07:11:56 +00:00
2026-11-03 15:02:57 +00:00
2026-11-03 02:26:29 +00:00
2026-10-30 20:53:25 +00:00
2026-11-03 21:02:34 +00:00
2026-10-30 20:53:25 +00:00
2026-10-30 16:35:54 +00:00
2026-11-03 21:22:21 +00:00
2026-10-27 05:52:01 +00:00
2026-11-03 15:02:57 +00:00
2026-11-03 21:23:50 +00:00
2026-10-29 22:36:06 +00:00
2026-10-28 21:09:05 +00:00
2026-11-03 15:02:57 +00:00
2026-11-02 19:26:15 +00:00
2026-10-30 23:56:12 +00:00
2026-10-27 05:52:01 +00:00
viyatb-oai
5667598c8d