From 788c6f4f4cc2d357b5bc4eac2d2d59d9865a842c Mon Sep 17 00:00:00 2001 From: viyatb-oai Date: Sat, 9 May 2026 08:55:41 -0700 Subject: [PATCH] fix(windows-sandbox): finish CI callsite updates Co-authored-by: Codex noreply@openai.com --- codex-rs/cli/src/debug_sandbox.rs | 2 ++ codex-rs/windows-sandbox-rs/src/spawn_prep.rs | 1 + 2 files changed, 3 insertions(+) diff --git a/codex-rs/cli/src/debug_sandbox.rs b/codex-rs/cli/src/debug_sandbox.rs index 76bf16694c..2722f69849 100644 --- a/codex-rs/cli/src/debug_sandbox.rs +++ b/codex-rs/cli/src/debug_sandbox.rs @@ -389,6 +389,8 @@ async fn run_command_under_windows_session( cwd.as_path(), env, None, + /*additional_deny_read_paths*/ &[], + /*additional_deny_write_paths*/ &[], /*tty*/ false, /*stdin_open*/ true, config.permissions.windows_sandbox_private_desktop, diff --git a/codex-rs/windows-sandbox-rs/src/spawn_prep.rs b/codex-rs/windows-sandbox-rs/src/spawn_prep.rs index 2472330b8e..4396383ad7 100644 --- a/codex-rs/windows-sandbox-rs/src/spawn_prep.rs +++ b/codex-rs/windows-sandbox-rs/src/spawn_prep.rs @@ -214,6 +214,7 @@ pub(crate) fn allow_null_device_for_workspace_write(is_workspace_write: bool) { } } +#[allow(clippy::too_many_arguments)] pub(crate) fn apply_legacy_session_acl_rules( policy: &SandboxPolicy, sandbox_policy_cwd: &Path,