iceweasel-oai 2a32e7c963 Expand Linux sandbox deny globs in process (#59711) ...

## What changed

Replace external `rg` scans and the fallback walker with an in-process `ignore` walker for bubblewrap deny-glob expansion. Remove scanner lookup and dependency tracking from sandbox integrity checks.

Include hidden and ignored files, respect scan depth limits, and fail closed on traversal errors. Anchor patterns to their static search roots and preserve literal leading `#`, leading `!`, trailing spaces, and unclosed character classes. Follow explicit symlink roots while skipping child symlinks, and mask canonical targets of matched paths.

## Testing

Extend unit and sandbox integration coverage for glob syntax, depth limits, traversal failures, symlink handling, commands launched from `/`, and operation without executing `rg`.

GitOrigin-RevId: 1767d7f37acb149457642bf24ee5971a28696438

2026-11-05 17:56:59 +00:00

..

client

Refine enterprise MCP auth errors and request authority checks (#55691)

2026-10-20 22:33:14 +00:00

discoverV2

Integrate discovery V2 with step-scoped skill catalogs (#55322)

2026-10-19 17:02:20 +00:00

environment

Preserve remote read compatibility with older executors (#58195)

2026-10-29 23:56:17 +00:00

no_follow

Bind final-message output before running sandboxed tools (#58974)

2026-11-02 20:36:39 +00:00

noise_relay

Add trace-safe diagnostics for Noise relay request progress (#58025)

2026-10-29 08:51:18 +00:00

proto

Propagate request trace context through exec-server relays (#38690)

2026-08-15 03:00:35 +00:00

remote

Add ChatGPT token stdin authentication to exec-server (#59569)

2026-11-05 04:25:19 +00:00

sandbox_integrity

Expand Linux sandbox deny globs in process (#59711)

2026-11-05 17:56:59 +00:00

server

Extend and bound exec-server session recovery (#58983)

2026-11-02 21:09:09 +00:00

arg0_exec_helper.rs

Preserve custom arg0 for sandboxed exec-server processes (#34497)

2026-07-21 08:59:41 +00:00

capability_discovery_cache.rs

Integrate discovery V2 with step-scoped skill catalogs (#55322)

2026-10-19 17:02:20 +00:00

capability_discovery_v2_cache.rs

Acquire and cache opt-in executor capability inventories via V2 (#53736)

2026-10-13 18:15:50 +00:00

capability_discovery.rs

Add executor capability discovery V2 infrastructure (#47683)

2026-09-23 22:20:34 +00:00

client_api.rs

Support trusted headers for remote exec WebSockets (#42606)

2026-09-03 20:01:07 +00:00

client_error.rs

Add timeout-aware exec-server configuration reads (#52679)

2026-10-09 19:22:21 +00:00

client_inbound_request_limit_tests.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

client_inbound_request_limit.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

client_recovery_tests.rs

Retry transient registry failures during initial exec connection (#39777)

2026-08-20 18:48:17 +00:00

client_recovery.rs

Extend and bound exec-server session recovery (#58983)

2026-11-02 21:09:09 +00:00

client_refresh_tests.rs

Gate capability discovery V2 on executor version (#57192)

2026-10-26 19:03:08 +00:00

client_refresh.rs

Add observers for initial exec-server connection attempts (#52724)

2026-10-09 23:28:38 +00:00

client_telemetry.rs

Add client-side exec-server RPC attempt metrics (#42883)

2026-09-04 23:06:00 +00:00

client_transport_tests.rs

Extend and bound exec-server session recovery (#58983)

2026-11-02 21:09:09 +00:00

client_transport.rs

Extend and bound exec-server session recovery (#58983)

2026-11-02 21:09:09 +00:00

client.rs

Reload remote executor credentials safely across token rotation (#58251)

2026-10-30 05:30:20 +00:00

connection.rs

Allow large file writes over direct exec-server WebSockets (#54135)

2026-10-15 00:00:57 +00:00

environment_bootstrap_tests.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment_bootstrap.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment_config_tests.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

environment_config.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

environment_provider.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment_registry_tests.rs

…

environment_registry.rs

…

environment_toml.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment.rs

Preserve remote read compatibility with older executors (#58195)

2026-10-29 23:56:17 +00:00

file_handle_tests.rs

Bound in-flight file opens in exec-server (#50162)

2026-10-02 03:31:52 +00:00

file_handle.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

forward_tests.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

forward.rs

Add exec-server forwarding mode (#39249)

2026-08-18 18:15:21 +00:00

fs_helper_main.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

fs_helper.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

fs_sandbox_windows_tests.rs

Add opt-in history prefix preservation for full agent forks (#52535)

2026-10-09 11:08:24 +00:00

fs_sandbox.rs

Resolve workspace permissions at the sandbox launch boundary (#59530)

2026-11-05 00:30:20 +00:00

lib.rs

Add ChatGPT token stdin authentication to exec-server (#59569)

2026-11-05 04:25:19 +00:00

local_file_system_path_uri_tests.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

local_file_system_read_tests.rs

Make exec-server file reads cancellable between chunks (#49696)

2026-09-30 18:18:03 +00:00

local_file_system_read.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

local_file_system.rs

Add streaming file replacement to filesystem abstractions (#54505)

2026-10-16 04:42:32 +00:00

local_process.rs

Extend and bound exec-server session recovery (#58983)

2026-11-02 21:09:09 +00:00

network_policy_decisions_tests.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

network_policy_decisions.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

noise_channel_tests.rs

…

noise_channel.rs

Size Noise handshake buffers to their messages (#34544)

2026-07-21 13:39:33 +00:00

process_sandbox_tests.rs

Support configured credential providers in remote execution (#56049)

2026-10-22 01:54:51 +00:00

process_sandbox.rs

Resolve workspace permissions at the sandbox launch boundary (#59530)

2026-11-05 00:30:20 +00:00

process_telemetry.rs

Add exec-server RPC timing and process startup tracing (#47680)

2026-09-23 22:10:28 +00:00

process.rs

Wire the Windows MXC sandbox into command execution (#45176)

2026-09-13 06:07:03 +00:00

regular_file_tests.rs

Add a symlink-safe reader for sensitive files (#39200)

2026-08-18 13:36:16 +00:00

regular_file.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

relay_noise_tests.rs

Use paused time throughout the Noise relay recovery test (#59544)

2026-11-05 01:54:03 +00:00

relay_proto.rs

…

relay_writer_tests.rs

Bound relay connection attempts and handle pongs during blocked writes (#51502)

2026-10-06 23:07:25 +00:00

relay_writer.rs

Bound relay connection attempts and handle pongs during blocked writes (#51502)

2026-10-06 23:07:25 +00:00

relay.rs

Extend and bound exec-server session recovery (#58983)

2026-11-02 21:09:09 +00:00

remote_file_stream.rs

Define exec-server protocol types for streamed file writes (#49778)

2026-10-01 00:43:55 +00:00

remote_file_system_path_uri_tests.rs

Preserve remote read compatibility with older executors (#58195)

2026-10-29 23:56:17 +00:00

remote_file_system.rs

Preserve remote read compatibility with older executors (#58195)

2026-10-29 23:56:17 +00:00

remote_process.rs

Record normalized sandbox violation events (#36207)

2026-07-30 19:23:33 +00:00

remote.rs

Add ChatGPT token stdin authentication to exec-server (#59569)

2026-11-05 04:25:19 +00:00

resolved_capability.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

rpc_client_metrics_tests.rs

Add client-side exec-server RPC attempt metrics (#42883)

2026-09-04 23:06:00 +00:00

rpc_pending_request.rs

Clean up canceled exec-server RPC requests immediately (#49332)

2026-09-29 18:34:48 +00:00

rpc_server_requests_tests.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

rpc_server_requests.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

rpc_timing.rs

Add exec-server RPC timing and process startup tracing (#47680)

2026-09-23 22:10:28 +00:00

rpc.rs

Add trace-safe diagnostics for Noise relay request progress (#58025)

2026-10-29 08:51:18 +00:00

runtime_options.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

sandbox_selection.rs

Preserve remote read compatibility with older executors (#58195)

2026-10-29 23:56:17 +00:00

sandboxed_file_open.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

sandboxed_file_system_path_uri_tests.rs

Preserve remote read compatibility with older executors (#58195)

2026-10-29 23:56:17 +00:00

sandboxed_file_system.rs

Run sandbox integrity checks before commands and filesystem operations (#51843)

2026-10-07 21:52:43 +00:00

server.rs

Allow exec-server to proxy permitted private IPs upstream (#48568)

2026-09-26 23:17:41 +00:00

shell_snapshot_credentials.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

shell_snapshot_file_tests.rs

Replay exec-server shell snapshots through unnamed files (#48078)

2026-09-25 12:23:15 +00:00

shell_snapshot_file.rs

Replay exec-server shell snapshots through unnamed files (#48078)

2026-09-25 12:23:15 +00:00

shell_snapshot_process.rs

Clean up process groups for failed shell snapshot captures (#49782)

2026-10-01 00:48:08 +00:00

shell_snapshot_tests.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

shell_snapshot.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

telemetry.rs

Extend and bound exec-server session recovery (#58983)

2026-11-02 21:09:09 +00:00

trace_context_tests.rs

…

trace_context.rs

Propagate caller metadata to rendezvous connections (#39073)

2026-08-17 20:36:10 +00:00

websocket_pong_watchdog_tests.rs

…

websocket_pong_watchdog.rs

…