iceweasel-oai 7c47952f7c Allow nested Git repositories in the Windows sandbox (#38080) ...

## Why

Git rejects repositories owned by the primary user when commands run as the
sandbox user. Trusting only the enclosing worktree leaves nested repositories
unavailable.

## What changed

Add both the worktree root and its `/*` wildcard to Git's `safe.directory`
environment configuration. Update the directory and gitfile unit tests to
expect both entries.

GitOrigin-RevId: 4b8e2bc8cc52cff580451ffbd17eb71325957404

2026-08-11 22:22:18 +00:00

..

bin

Grant Windows sandbox access to the Codex app root (#38064)

2026-08-11 19:48:38 +00:00

conpty

Terminate Windows process trees with job objects (#34624)

2026-07-21 22:07:09 +00:00

elevated

Harden Windows elevated sandbox startup (#34629)

2026-07-21 22:36:18 +00:00

unified_exec

Honor the configured Windows sandbox level for managed networking (#37875)

2026-08-10 19:57:40 +00:00

wfp

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

acl.rs

Harden Windows elevated sandbox startup (#34629)

2026-07-21 22:36:18 +00:00

allow.rs

windows-sandbox: pass workspace roots to runner (#24108)

2026-05-28 15:26:55 -07:00

audit.rs

windows-sandbox: remove SandboxPolicy runner plumbing (#23813)

2026-05-26 14:56:27 -07:00

cap.rs

[codex] Scope Windows sandbox write-root capability SIDs (#21479)

2026-05-13 18:28:52 +00:00

deny_read_acl.rs

feat(sandbox): add Windows deny-read parity (#18202)

2026-05-11 23:04:28 -07:00

deny_read_resolver.rs

Skip missing paths in filesystem sandbox entries (#34598)

2026-07-21 19:17:18 +00:00

deny_read_state.rs

feat(sandbox): add Windows deny-read parity (#18202)

2026-05-11 23:04:28 -07:00

desktop.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

dpapi.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

elevated_impl.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

env.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

helper_materialization.rs

Run fs helper through Windows sandbox wrapper (#28359)

2026-06-17 10:00:42 -07:00

hide_users.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

identity.rs

Preserve Windows sandbox proxy settings in guardian sessions (#35036)

2026-07-23 23:35:29 +00:00

lib.rs

Preserve Windows sandbox proxy settings in guardian sessions (#35036)

2026-07-23 23:35:29 +00:00

logging.rs

Attach Windows sandbox log to feedback reports (#24623)

2026-05-26 15:59:25 -07:00

path_normalization.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

proc_thread_attr.rs

Terminate Windows process trees with job objects (#34624)

2026-07-21 22:07:09 +00:00

process.rs

Terminate Windows process trees with job objects (#34624)

2026-07-21 22:07:09 +00:00

resolved_permissions.rs

Skip missing paths in filesystem sandbox entries (#34598)

2026-07-21 19:17:18 +00:00

sandbox_utils.rs

Allow nested Git repositories in the Windows sandbox (#38080)

2026-08-11 22:22:18 +00:00

setup_error.rs

Improve Windows sandbox setup refresh diagnostics (#26471)

2026-06-04 16:52:10 -07:00

setup.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

spawn_prep.rs

fix(windows-sandbox): allow deletion in writable roots (#31138)

2026-07-08 15:05:57 -03:00

ssh_config_dependencies.rs

Filter Windows sandbox roots from SSH config dependencies (#18493)

2026-04-19 14:58:33 -07:00

stdio_bridge_tests.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

stdio_bridge.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

token_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

token.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

wfp_setup.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

wfp.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

winutil.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

workspace_acl.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

wrapper_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

wrapper.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00