iceweasel-oai 3df96b085c Filter uninspectable network roots from implicit MXC read grants (#54363) ...

## What changed

On Windows, omit network roots whose filesystem identity cannot be inspected when expanding implicit `:root` read access. Retain inspectable shares and roots containing the policy or command working directory, and apply the same filtering during policy inspection and command launch.

Keep explicit grants unchanged and continue expanding `:root` write and deny rules across all executor volumes.

## Testing

Extend policy tests to cover filtered read roots, explicit grant precedence, and approved-command write access across all volumes.

GitOrigin-RevId: c4d7c8ce2c9138cdb4518385e2cd05f66518628e

2026-10-15 17:36:47 +00:00

..

lib.rs

Filter uninspectable network roots from implicit MXC read grants (#54363)

2026-10-15 17:36:47 +00:00

native.rs

Migrate the Windows MXC sandbox to split MXC crates (#52707)

2026-10-09 22:11:30 +00:00

policy_tests.rs

Filter uninspectable network roots from implicit MXC read grants (#54363)

2026-10-15 17:36:47 +00:00

policy.rs

Filter uninspectable network roots from implicit MXC read grants (#54363)

2026-10-15 17:36:47 +00:00

transport_tests.rs

Preserve Windows startup variables and MXC child environment defaults (#54027)

2026-10-14 16:31:06 +00:00

transport.rs

Preserve Windows startup variables and MXC child environment defaults (#54027)

2026-10-14 16:31:06 +00:00

windows.rs

Filter uninspectable network roots from implicit MXC read grants (#54363)

2026-10-15 17:36:47 +00:00