openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-11-06 20:20:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
b93a7b15124698a34cec2ee4d155c8a55152e319
codex/codex-rs
T
History
zm-oai b93a7b1512 Repair legacy Windows sandbox bin permissions for SYSTEM (#59745) 
## Why

Legacy `.sandbox-bin` ACLs grant `SYSTEM` Modify access without `WRITE_DAC`, preventing the provisioning service from reapplying the bin policy.

## What changed

- Grant `SYSTEM` inheritable `WRITE_DAC` access when protecting the sandbox bin so it can update permissions on the directory and its children.
- Before legacy provisioning, repair the old ACL through an authenticated owner handle when `SYSTEM` is denied access. Upgrade only the expected SYSTEM entry in a protected, allow-only ACL, reject unexpected permissions, and verify that `SYSTEM` can reopen the directory with `WRITE_DAC`.

## Testing

Extend ACL coverage to check `SYSTEM` permissions on the bin and existing and newly created runner files. Add an ignored Windows integration test requiring LocalSystem and user-owned legacy homes to cover successful repair, repeated repair, and rejection of an explicit SYSTEM deny entry.

GitOrigin-RevId: 2303cdf5182947c2d044c79ac7027a16f0373c7d
2026-11-05 21:33:57 +00:00
..
.cargo
Ignore the unmaintained pin-utils advisory in dependency audits (#59638)
2026-11-05 11:22:06 +00:00
.config
…
agent-graph-store
Persist subagent relationships before creating child storage (#58129)
2026-10-29 17:25:51 +00:00
agent-identity
Wire shared runtime authentication through threads and API clients (#59177)
2026-11-03 15:02:57 +00:00
agent-message-board-client
Route message-board notifications through agent mailboxes (#59139)
2026-11-03 12:33:26 +00:00
agent-message-board-host
Extract channel notification formatting into PostPreview (#59688)
2026-11-05 16:08:23 +00:00
agent-roles
…
analytics
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
ansi-escape
…
app-server
Prioritize filename matches in fuzzy file search (#59709)
2026-11-05 17:34:20 +00:00
app-server-client
Set output_deferred to false for cloud thread items (#59714)
2026-11-05 18:22:37 +00:00
app-server-daemon
Classify daemon auto-start failures in TUI telemetry (#59058)
2026-11-03 04:20:50 +00:00
app-server-protocol
Support direct Guardian review of recorded MCP calls (#59735)
2026-11-05 20:55:46 +00:00
app-server-protocol-noop-macros
…
app-server-test-client
Scope local history discovery to the current ChatGPT account (#58918)
2026-11-02 16:00:20 +00:00
app-server-transport
Add debug timing for thread item pagination (#59497)
2026-11-04 21:33:28 +00:00
apply-patch
Support direct Guardian review of patches invoked through exec_command (#58931)
2026-11-02 17:05:56 +00:00
arg0
Stop dotenv loading on persistent I/O errors (#57233)
2026-10-26 20:26:32 +00:00
async-utils
…
attachment-store
Use measured durations to budget uploaded audio (#59268)
2026-11-04 00:19:12 +00:00
aws-auth
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
backend-client
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
build-info
…
bwrap
…
chatgpt
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cli
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cloud-client
Support Cloud conversation requests in the app-server client (#59693)
2026-11-05 16:41:33 +00:00
cloud-config
Add ChatGPT token stdin authentication to exec-server (#59569)
2026-11-05 04:25:19 +00:00
cloud-tasks
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cloud-tasks-client
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cloud-tasks-mock-client
…
code-mode
Increase shared code-mode host capacity safely (#59590)
2026-11-05 07:13:37 +00:00
code-mode-host
Increase shared code-mode host capacity safely (#59590)
2026-11-05 07:13:37 +00:00
code-mode-protocol
Increase shared code-mode host capacity safely (#59590)
2026-11-05 07:13:37 +00:00
code-mode-runtime
Enable server-side output truncation for Code Mode sessions (#57870)
2026-10-29 01:04:48 +00:00
codex-api
Extend runtime auth to account, plugin, and file requests (#59564)
2026-11-05 03:49:13 +00:00
codex-backend-openapi-models
Add support for Academic Researchers plans (#55387)
2026-10-19 21:43:19 +00:00
codex-client
…
codex-experimental-api-macros
…
codex-home
…
codex-mcp
Forward caller metadata on MCP resource reads (#59509)
2026-11-04 22:55:22 +00:00
collaboration-mode-templates
…
config
Resample Guardian denials with the original request (#59659)
2026-11-05 13:38:12 +00:00
config-schema
…
connectors
Support app settings in plugin configuration (#58428)
2026-10-30 20:39:47 +00:00
context-fragments
Record additional context counts, sizes, and truncation metrics (#58144)
2026-10-29 18:24:34 +00:00
core
Forward explicit cyber access programs with header authentication (#59743)
2026-11-05 21:21:19 +00:00
core-api
Add per-turn prompt cache TTL options (#59480)
2026-11-04 19:58:24 +00:00
core-plugin-common
Reconcile V2 executor plugins with cloud catalogs (#55301)
2026-10-19 15:15:17 +00:00
core-plugins
Extend runtime auth to account, plugin, and file requests (#59564)
2026-11-05 03:49:13 +00:00
diagnostics
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
direct-tool-timing
Report auto-review overhead in turn critical-path analytics (#59260)
2026-11-03 23:49:01 +00:00
docs
Run Bazel CI locally without BuildBuddy credentials (#59055)
2026-11-03 04:08:59 +00:00
exec
Add experimental command output deferral to thread item listings (#59601)
2026-11-05 08:10:44 +00:00
exec-server
Expand Linux sandbox deny globs in process (#59711)
2026-11-05 17:56:59 +00:00
exec-server-cli
Add ChatGPT token stdin authentication to exec-server (#59569)
2026-11-05 04:25:19 +00:00
exec-server-protocol
Cache empty remote skill discovery with filesystem watches (#57598)
2026-10-27 23:53:09 +00:00
execpolicy
Add opt-in Unicode canonical matching to exec policy rules (#59535)
2026-11-05 00:55:46 +00:00
ext
Restrict Guardian native multi-agent history to the OpenAI provider (#59737)
2026-11-05 20:57:03 +00:00
external-agent-migration
Extend runtime auth to account, plugin, and file requests (#59564)
2026-11-05 03:49:13 +00:00
features
Resample Guardian denials with the original request (#59659)
2026-11-05 13:38:12 +00:00
feedback
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
file-search
Prioritize filename matches in fuzzy file search (#59709)
2026-11-05 17:34:20 +00:00
file-system
Preserve filesystem authority when loading skills (#59279)
2026-11-04 01:13:54 +00:00
file-watcher
…
git-utils
Stabilize cross-platform tests and directory-change fork permissions (#59369)
2026-11-04 09:51:28 +00:00
guardian-context
Fix missing item ID generators in retained instruction tests (#59403)
2026-11-04 13:02:36 +00:00
history
Preserve pending agent messages across compaction (#59404)
2026-11-04 13:03:01 +00:00
hooks
Preserve command cwd in permission and post-tool hooks (#57203)
2026-10-26 19:21:08 +00:00
http-client
Add ChatGPT token stdin authentication to exec-server (#59569)
2026-11-05 04:25:19 +00:00
install-context
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
keyring-store
…
linux-sandbox
Stabilize the unreadable-glob traversal error test (#59736)
2026-11-05 20:56:09 +00:00
lmstudio
…
login
Fix the workspace policy test's auth loading call (#59501)
2026-11-04 22:03:18 +00:00
memories
Bind memory consolidation permissions to the memory root (#59507)
2026-11-04 22:43:34 +00:00
mermaid
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
message-board
Clarify message board notification delivery documentation (#59713)
2026-11-05 18:12:28 +00:00
message-board-mcp
Add opt-in MCP discovery for in-memory agent message boards (#58973)
2026-11-02 20:34:35 +00:00
message-history
Consolidate Rust unit tests under dedicated test modules (#56247)
2026-10-22 19:36:47 +00:00
model-provider
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
model-provider-info
Add model provider discovery to the app server (#58845)
2026-11-02 08:31:14 +00:00
models-manager
Wire shared runtime authentication through threads and API clients (#59177)
2026-11-03 15:02:57 +00:00
mxc-sandbox
Expand Windows deny-read globs without invoking ripgrep (#59250)
2026-11-03 23:00:54 +00:00
network-proxy
Add constraint-aware standalone network proxy configuration (#57180)
2026-10-26 18:22:40 +00:00
ollama
…
otel
Record saved multi-agent opt-outs in session telemetry (#59478)
2026-11-04 19:57:30 +00:00
otel-trace-websocket
…
plugin
…
plugin-host
Add a bounded V8 runtime for UI plugin processes (#57508)
2026-10-27 16:36:32 +00:00
process-hardening
…
prompts
Add web search provider metadata and configuration (#59033)
2026-11-03 01:58:18 +00:00
protocol
Allow per-turn overrides for direct-only tool namespaces (#59481)
2026-11-04 19:58:49 +00:00
realtime-webrtc
…
response-debug-context
Handle budget_reached as a terminal session budget error (#59228)
2026-11-03 21:02:34 +00:00
responses-api-proxy
Enable GitHub Actions OIDC authentication in the Responses API proxy (#55320)
2026-10-19 16:56:42 +00:00
rmcp-client
Prevent idle Windows MCP pipes from blocking unrelated I/O (#59726)
2026-11-05 19:46:31 +00:00
rollout
Allow per-turn overrides for direct-only tool namespaces (#59481)
2026-11-04 19:58:49 +00:00
rollout-trace
Resolve network approval prompts when their requests end (#58350)
2026-10-30 14:40:32 +00:00
runtime-agent-instance
Bind reusable backend clients to runtime authentication (#59255)
2026-11-03 23:35:00 +00:00
sandboxing
Remove the legacy Seatbelt network policy wrapper (#59632)
2026-11-05 11:13:04 +00:00
scripts
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
secrets
Populate the local secrets cache after successful saves (#59520)
2026-11-04 23:46:52 +00:00
shell-command
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
skills
Prefer documented replacements for deprecation-driven model migrations (#58134)
2026-10-29 17:49:51 +00:00
state
Allow per-turn overrides for direct-only tool namespaces (#59481)
2026-11-04 19:58:49 +00:00
stdio-to-uds
…
tcp-tunnel
Limit decoded HTTP/3 response headers in the TCP tunnel (#56024)
2026-10-22 00:19:02 +00:00
terminal-detection
Recognize Rex terminals and enable Kitty graphics for pets (#58270)
2026-10-30 07:11:56 +00:00
test-binary-support
…
thread-manager-sample
Resample Guardian denials with the original request (#59659)
2026-11-05 13:38:12 +00:00
thread-store
Capture Guardian evidence incrementally with explicit acknowledgements (#59670)
2026-11-05 15:01:44 +00:00
tools
Add audio file references with explicit runtime rejection (#58430)
2026-10-30 20:53:25 +00:00
tui
Add a sidebar chooser and floating workspace shortcut panels (#59739)
2026-11-05 21:05:51 +00:00
uds
…
user-verification
…
utils
Prevent idle Windows MCP pipes from blocking unrelated I/O (#59726)
2026-11-05 19:46:31 +00:00
v8-poc
Test V8 inline typed array storage limits (#58385)
2026-10-30 16:35:54 +00:00
vendor
…
voice-host
Stabilize cross-platform tests and directory-change fork permissions (#59369)
2026-11-04 09:51:28 +00:00
websocket-auth
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
websocket-client
Wire shared runtime authentication through threads and API clients (#59177)
2026-11-03 15:02:57 +00:00
windows-sandbox-rs
Repair legacy Windows sandbox bin permissions for SYSTEM (#59745)
2026-11-05 21:33:57 +00:00
windows-sandbox-service
Repair legacy Windows sandbox bin permissions for SYSTEM (#59745)
2026-11-05 21:33:57 +00:00
workload-identity
Support API workload identity authentication (#59275)
2026-11-04 00:52:58 +00:00
worktree
…
.gitignore
…
BUILD.bazel
Ship the standalone executor in release packages (#57837)
2026-10-28 21:09:05 +00:00
Cargo.lock
Prevent idle Windows MCP pipes from blocking unrelated I/O (#59726)
2026-11-05 19:46:31 +00:00
Cargo.toml
Add a token-efficient model-facing ID generator (#59540)
2026-11-05 01:34:00 +00:00
clippy.toml
…
config.md
…
default.nix
…
deny.toml
Ignore the unmaintained pin-utils advisory in dependency audits (#59638)
2026-11-05 11:22:06 +00:00
README.md
…
rust-toolchain.toml
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink