iceweasel-oai 34e74fda0e Align deny-read matching with executor path semantics (#41209) ...

## Why

Read-deny policies must use the target executor's path convention so URI-based
policy checks and native filesystem enumeration enforce the same rules.

## What changed

- Prepare deny roots and glob matchers from `PathUri` policy context, including
  executor-relative working directories and home-relative patterns.
- Match Windows globs case-insensitively with normalized separators, while
  preserving byte-oriented POSIX matching for non-UTF-8 paths.
- Fail closed for malformed paths, incompatible path conventions, unresolved
  home-relative patterns, and invalid globs.
- Make Windows deny-read discovery use case-insensitive ripgrep glob matching.

## Testing

Added coverage for Windows URI conventions, executor home expansion,
case-insensitive `.env` discovery, malformed paths, non-UTF-8 names, and
canonical directory-link targets.

GitOrigin-RevId: 36001219a2e9b36acfce8972dc1d3bbc304271c5

2026-08-27 21:15:37 +00:00

..

bin

Harden Windows sandbox helper cleanup (#40808)

2026-08-26 06:02:56 +00:00

conpty

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

elevated

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

unified_exec

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

wfp

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

acl_tests.rs

Propagate Windows sandbox ACL update failures (#39279)

2026-08-18 20:56:10 +00:00

acl.rs

Propagate Windows sandbox ACL update failures (#39279)

2026-08-18 20:56:10 +00:00

allow.rs

windows-sandbox: pass workspace roots to runner (#24108)

2026-05-28 15:26:55 -07:00

audit.rs

Record Windows world-writable scan telemetry (#40983)

2026-08-26 21:52:56 +00:00

cap.rs

[codex] Scope Windows sandbox write-root capability SIDs (#21479)

2026-05-13 18:28:52 +00:00

deny_read_acl.rs

feat(sandbox): add Windows deny-read parity (#18202)

2026-05-11 23:04:28 -07:00

deny_read_resolver_access_tests.rs

Align deny-read matching with executor path semantics (#41209)

2026-08-27 21:15:37 +00:00

deny_read_resolver.rs

Align deny-read matching with executor path semantics (#41209)

2026-08-27 21:15:37 +00:00

deny_read_state.rs

feat(sandbox): add Windows deny-read parity (#18202)

2026-05-11 23:04:28 -07:00

deny_read_walker_tests.rs

Improve sandboxing, MCP errors, and cached approvals (#41196)

2026-08-27 20:05:08 +00:00

deny_read_walker.rs

Improve sandboxing, MCP errors, and cached approvals (#41196)

2026-08-27 20:05:08 +00:00

desktop_tests.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

desktop.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

dpapi.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

elevated_impl.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

env.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

helper_materialization.rs

Resolve bundled Windows helpers through bin junctions (#39649)

2026-08-20 07:42:18 +00:00

hide_users.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

identity.rs

Preserve Windows sandbox proxy settings in guardian sessions (#35036)

2026-07-23 23:35:29 +00:00

lib.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

logging.rs

Attach Windows sandbox log to feedback reports (#24623)

2026-05-26 15:59:25 -07:00

path_normalization.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

proc_thread_attr.rs

Terminate Windows process trees with job objects (#34624)

2026-07-21 22:07:09 +00:00

process.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

resolved_permissions.rs

Preserve Windows root reads with deny-read rules (#40441)

2026-08-24 17:29:21 +00:00

sandbox_utils.rs

Allow nested Git repositories in the Windows sandbox (#38080)

2026-08-11 22:22:18 +00:00

setup_error.rs

Improve Windows sandbox setup refresh diagnostics (#26471)

2026-06-04 16:52:10 -07:00

setup.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

spawn_prep.rs

fix(windows-sandbox): allow deletion in writable roots (#31138)

2026-07-08 15:05:57 -03:00

ssh_config_dependencies.rs

Filter Windows sandbox roots from SSH config dependencies (#18493)

2026-04-19 14:58:33 -07:00

stdio_bridge_tests.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

stdio_bridge.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

token_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

token.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

wfp_setup.rs

Prepare the telemetry shutdown worker during initialization (#39050)

2026-08-17 19:06:53 +00:00

wfp.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

winutil.rs

Reuse private desktops across Windows sandbox commands (#40672)

2026-08-25 18:41:03 +00:00

workspace_acl.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

wrapper_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

wrapper.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00