iceweasel-oai 6b879fe248 don't grant sandbox read access to ~/.ssh and a few other dirs. (#12835) ...

OpenSSH complains if any other users have read access to ssh keys.

ie https://github.com/openai/codex/issues/12226

2026-02-26 11:35:55 -08:00

..

bin

Elevated Sandbox 3 (#7809)

2025-12-11 13:51:27 -08:00

acl.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

allow.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00

audit.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

cap.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

command_runner_win.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

cwd_junction.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

dpapi.rs

use machine scope instead of user scope for dpapi. (#9713)

2026-01-22 16:40:13 -08:00

elevated_impl.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

env.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

firewall.rs

error code/msg details for failed elevated setup (#9941)

2026-01-27 23:06:10 -08:00

hide_users.rs

best effort to "hide" Sandbox users (#8492)

2026-01-05 12:29:10 -08:00

identity.rs

Elevated sandbox NUX (#8789)

2026-01-08 16:23:06 -08:00

lib.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00

logging.rs

fix: handle utf-8 in windows sandbox logs (#8647)

2026-01-26 15:11:27 -08:00

path_normalization.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

policy.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

process.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

read_acl_mutex.rs

speed and reliability improvements for setting reads ACLs (#8216)

2025-12-17 15:27:52 -08:00

sandbox_users.rs

error code/msg details for failed elevated setup (#9941)

2026-01-27 23:06:10 -08:00

setup_error.rs

Include real OS info in metrics. (#10425)

2026-02-05 06:30:31 -08:00

setup_main_win.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00

setup_orchestrator.rs

don't grant sandbox read access to ~/.ssh and a few other dirs. (#12835)

2026-02-26 11:35:55 -08:00

token.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

winutil.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

workspace_acl.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00