iceweasel-oai a26f219f67 Harden Windows elevated sandbox startup (#34629) ...

## What changed

- Check writable-root permissions for the sandbox group and root capability SID from a single DACL snapshot, and refresh the ACL when either SID is missing the required access or has a stale explicit delete-child grant.
- Start the command runner without loading a user profile and poll more frequently while waiting for it to become ready.
- Make the Windows sandbox binaries available to Bazel tests.

## Testing

- Add coverage that verifies ACL refresh checks every requested SID.
- Add an elevated non-TTY command test that verifies environment forwarding, stdout, and exit-code propagation.

GitOrigin-RevId: 657ed9dc906039299f9ffa4772e0926c47066a73

2026-07-21 22:36:18 +00:00

..

src

Harden Windows elevated sandbox startup (#34629)

2026-07-21 22:36:18 +00:00

BUILD.bazel

Harden Windows elevated sandbox startup (#34629)

2026-07-21 22:36:18 +00:00

build.rs

[codex] Fix Windows sandbox build script lint (#26445)

2026-06-04 13:03:47 -07:00

Cargo.toml

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

codex-windows-sandbox-setup.manifest

[codex] Restore setup helper UAC manifest (#25949)

2026-06-03 09:21:24 -07:00

sandbox_smoketests.py

chore(cli) deprecate --full-auto (#20133)

2026-04-29 04:41:30 +00:00