Michael Bolin e6518e015e sandboxing: intersect permission profiles semantically

2026-04-20 17:42:14 -07:00

..

bwrap_tests.rs

fix(sandboxing): reject WSL1 bubblewrap sandboxing (#17559)

2026-04-12 14:08:14 -07:00

bwrap.rs

fix(sandboxing): reject WSL1 bubblewrap sandboxing (#17559)

2026-04-12 14:08:14 -07:00

landlock_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

landlock.rs

fix: fix old system bubblewrap compatibility without falling back to vendored bwrap (#15693)

2026-03-25 23:51:39 -07:00

lib.rs

feat(sandbox): add glob deny-read platform enforcement (#18096)

2026-04-16 17:35:16 -07:00

manager_tests.rs

protocol: canonicalize file system permissions (#18274)

2026-04-20 09:57:03 -07:00

manager.rs

feat(sandbox): add glob deny-read platform enforcement (#18096)

2026-04-16 17:35:16 -07:00

policy_transforms_tests.rs

sandboxing: intersect permission profiles semantically

2026-04-20 17:42:14 -07:00

policy_transforms.rs

sandboxing: intersect permission profiles semantically

2026-04-20 17:42:14 -07:00

restricted_read_only_platform_defaults.sbpl

Move macOS sandbox builders into codex-sandboxing (#15593)

2026-03-23 21:26:35 -07:00

seatbelt_base_policy.sbpl

[codex] Allow PyTorch libomp shm in Seatbelt (#16945)

2026-04-06 22:12:30 +00:00

seatbelt_network_policy.sbpl

Move macOS sandbox builders into codex-sandboxing (#15593)

2026-03-23 21:26:35 -07:00

seatbelt_tests.rs

feat(sandbox): add glob deny-read platform enforcement (#18096)

2026-04-16 17:35:16 -07:00

seatbelt.rs

feat(sandbox): add glob deny-read platform enforcement (#18096)

2026-04-16 17:35:16 -07:00