iceweasel-oai eb4bea6e19 never let sandbox write to .codex/ or .codex/.sandbox/ (#8683) ...

Never treat .codex or .codex/.sandbox as a workspace root.
Handle write permissions to .codex/.sandbox in a single method so that
the sandbox setup/runner can write logs and other setup files to that
directory.

2026-01-09 11:29:52 +00:00

..

bin

Elevated Sandbox 3 (#7809)

2025-12-11 13:51:27 -08:00

acl.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

allow.rs

fix: introduce AbsolutePathBuf as part of sandbox config (#7856)

2025-12-12 15:25:22 -08:00

audit.rs

never let sandbox write to .codex/ or .codex/.sandbox/ (#8683)

2026-01-09 11:29:52 +00:00

cap.rs

bug fixes and perf improvements for elevated sandbox setup (#8094)

2025-12-16 09:48:29 -08:00

command_runner_win.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

cwd_junction.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

dpapi.rs

Elevated Sandbox 2 (#7792)

2025-12-10 21:23:16 -08:00

elevated_impl.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

env.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

firewall.rs

better idempotency for creating/updating firewall rules during setup. (#8686)

2026-01-09 11:29:51 +00:00

identity.rs

never let sandbox write to .codex/ or .codex/.sandbox/ (#8683)

2026-01-09 11:29:52 +00:00

lib.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

logging.rs

Elevated Sandbox 1 (#7788)

2025-12-09 19:00:33 -08:00

policy.rs

feat: introduce ExternalSandbox policy (#8290)

2025-12-18 17:02:03 -08:00

process.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

read_acl_mutex.rs

speed and reliability improvements for setting reads ACLs (#8216)

2025-12-17 15:27:52 -08:00

sandbox_users.rs

use a SandboxUsers group for ACLs instead of granting to each sandbox user separately (#8483)

2026-01-02 10:47:26 -08:00

setup_main_win.rs

better idempotency for creating/updating firewall rules during setup. (#8686)

2026-01-09 11:29:51 +00:00

setup_orchestrator.rs

never let sandbox write to .codex/ or .codex/.sandbox/ (#8683)

2026-01-09 11:29:52 +00:00

token.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

winutil.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00