Won Park ec84e69261 Harden the macOS sandbox against terminal input injection (#42590) ...

## Why

Sandboxed commands inherit the user's controlling terminal. Without an explicit
restriction, a child can use `TIOCSTI` to queue input for the unsandboxed shell
that resumes after Codex exits.

## What changed

Append a `file-ioctl` denial for `TIOCSTI` after the shared Seatbelt policy
allowances used by `codex sandbox`.

## Testing

Add a macOS PTY integration test that first proves terminal input injection
works without the sandbox, then verifies Seatbelt rejects it with `EPERM`.

GitOrigin-RevId: 5a8b0a5b4fd980cc406ad184d04ceae9b0ea90e4

2026-09-03 18:00:14 +00:00

..

app_server.rs

Support the app-server daemon on Windows (#42405)

2026-09-03 01:26:35 +00:00

cloud_auth.rs

Restrict cloud task credentials to trusted origins (#41403)

2026-08-28 19:44:50 +00:00

cloud_config.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

debug_clear_memories.rs

Add macOS voice runtime projection (#42204)

2026-09-02 04:52:32 +00:00

debug_models.rs

Add codex debug models to show model catalog (#18625)

2026-04-20 05:42:22 +00:00

delete.rs

Add session delete commands in CLI and TUI (#27476)

2026-06-10 18:04:02 -07:00

doctor_enterprise_network.rs

Add desktop update diagnostics to codex doctor (#39074)

2026-08-17 20:39:35 +00:00

doctor_path_safety.rs

Avoid executing PATH helpers before workspace trust (#42324)

2026-09-02 18:34:27 +00:00

exec_server.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

execpolicy.rs

feat: add justification arg to prefix_rule() in *.rules (#8751)

2026-01-05 21:24:48 +00:00

features.rs

Register the transcript v2 feature flag (#40554)

2026-08-25 05:35:25 +00:00

login.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

marketplace_add.rs

Add JSON output for plugin subcommands (#26631)

2026-06-05 14:40:31 -05:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

marketplace_upgrade.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

mcp_add_remove.rs

Support package-style MCP server names (#41700)

2026-08-30 16:45:34 +00:00

mcp_list.rs

Add dynamic HTTP header helpers for MCP servers (#38245)

2026-08-12 20:36:32 +00:00

plugin_cli.rs

Support remote marketplaces in the plugin CLI (#42150)

2026-09-01 22:51:14 +00:00

queue.rs

Add a command to queue messages for existing sessions (#39092)

2026-08-17 22:44:37 +00:00

sandbox_cloud_config.rs

Load cloud-managed profiles for codex sandbox (#35685)

2026-07-27 23:16:37 +00:00

sandbox_network_proxy.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

sandbox_tty.rs

Harden the macOS sandbox against terminal input injection (#42590)

2026-09-03 18:00:14 +00:00

update.rs

Add codex update command (#19933)

2026-04-27 23:33:59 -07:00