Michael Bolin 627b9d3f0f sandboxing: intersect permission profiles semantically

2026-04-16 17:12:38 -07:00

..

bwrap_tests.rs

fix(sandboxing): reject WSL1 bubblewrap sandboxing (#17559)

2026-04-12 14:08:14 -07:00

bwrap.rs

fix(sandboxing): reject WSL1 bubblewrap sandboxing (#17559)

2026-04-12 14:08:14 -07:00

landlock_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

landlock.rs

fix: fix old system bubblewrap compatibility without falling back to vendored bwrap (#15693)

2026-03-25 23:51:39 -07:00

lib.rs

feat(permissions): add glob deny-read policy support (#15979)

2026-04-16 10:31:51 -07:00

manager_tests.rs

protocol: canonicalize file system permissions

2026-04-16 17:02:23 -07:00

manager.rs

feat(permissions): add glob deny-read policy support (#15979)

2026-04-16 10:31:51 -07:00

policy_transforms_tests.rs

sandboxing: intersect permission profiles semantically

2026-04-16 17:12:38 -07:00

policy_transforms.rs

sandboxing: intersect permission profiles semantically

2026-04-16 17:12:38 -07:00

restricted_read_only_platform_defaults.sbpl

Move macOS sandbox builders into codex-sandboxing (#15593)

2026-03-23 21:26:35 -07:00

seatbelt_base_policy.sbpl

[codex] Allow PyTorch libomp shm in Seatbelt (#16945)

2026-04-06 22:12:30 +00:00

seatbelt_network_policy.sbpl

Move macOS sandbox builders into codex-sandboxing (#15593)

2026-03-23 21:26:35 -07:00

seatbelt_tests.rs

Support Unix socket allowlists in macOS sandbox (#17654)

2026-04-15 00:53:24 -07:00

seatbelt.rs

Support Unix socket allowlists in macOS sandbox (#17654)

2026-04-15 00:53:24 -07:00