iceweasel-oai e032d338f2 move cap_sid file into ~/.codex so the sandbox cannot overwrite it (#6798) ...

The `cap_sid` file contains the IDs of the two custom SIDs that the
Windows sandbox creates/manages to implement read-only and
workspace-write sandbox policies.

It previously lived in `<cwd>/.codex` which means that the sandbox could
write to it, which could degrade the efficacy of the sandbox. This
change moves it to `~/.codex/` (or wherever `CODEX_HOME` points to) so
that it is outside the workspace.

2025-11-17 15:49:41 -08:00

..

src

move cap_sid file into ~/.codex so the sandbox cannot overwrite it (#6798)

2025-11-17 15:49:41 -08:00

Cargo.lock

Windows Sandbox - Alpha version (#4905)

2025-10-30 15:51:57 -07:00

Cargo.toml

Improve world-writable scan (#6381)

2025-11-07 21:28:55 -08:00

sandbox_smoketests.py

move cap_sid file into ~/.codex so the sandbox cannot overwrite it (#6798)

2025-11-17 15:49:41 -08:00