iceweasel-oaiandGitHub 867820ac7e do not attempt ACLs on installed codex dir (#19214) ...

We used to attempt a read-ACL on the same dir as `codex.exe` to grant
the sandbox user the ability to invoke `codex-command-runner.exe`. That
worked for the CLI case but it always fails for the installed desktop
app.

We have another solution already in place that copies
`codex-command-runner.exe` to `CODEX_HOME/.sandbox-bin` so we don't even
need this anymore. It causes a scary looking error in the logs that is a
non-issue and is therefore confusing

2026-04-23 22:21:48 +00:00

..

bin

windows-sandbox: add runner IPC foundation for future unified_exec (#14139)

2026-03-16 19:45:06 +00:00

conpty

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

elevated

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

unified_exec

skip busted tests while I fix them (#18885)

2026-04-21 13:40:34 -07:00

acl.rs

ci: sync Bazel clippy lints and fix uncovered violations (#16351)

2026-03-31 17:09:48 -07:00

allow.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00

audit.rs

ci: sync Bazel clippy lints and fix uncovered violations (#16351)

2026-03-31 17:09:48 -07:00

cap.rs

ci: sync Bazel clippy lints and fix uncovered violations (#16351)

2026-03-31 17:09:48 -07:00

desktop.rs

chore: move pty and windows sandbox to Rust 2024 (#15954)

2026-03-27 02:31:08 -07:00

dpapi.rs

use machine scope instead of user scope for dpapi. (#9713)

2026-01-22 16:40:13 -08:00

elevated_impl.rs

fix: support split carveouts in windows elevated sandbox (#14568)

2026-04-09 17:34:52 -07:00

env.rs

ci: sync Bazel clippy lints and fix uncovered violations (#16351)

2026-03-31 17:09:48 -07:00

firewall.rs

only specify remote ports when the rule needs them (#17669)

2026-04-13 12:28:26 -07:00

helper_materialization.rs

use a version-specific suffix for command runner binary in .sandbox-bin (#19180)

2026-04-23 13:16:26 -07:00

hide_users.rs

best effort to "hide" Sandbox users (#8492)

2026-01-05 12:29:10 -08:00

identity.rs

fix: support split carveouts in windows elevated sandbox (#14568)

2026-04-09 17:34:52 -07:00

lib.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

logging.rs

chore: move pty and windows sandbox to Rust 2024 (#15954)

2026-03-27 02:31:08 -07:00

path_normalization.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

policy.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

proc_thread_attr.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

process.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

read_acl_mutex.rs

ci: sync Bazel clippy lints and fix uncovered violations (#16351)

2026-03-31 17:09:48 -07:00

sandbox_users.rs

chore: move pty and windows sandbox to Rust 2024 (#15954)

2026-03-27 02:31:08 -07:00

sandbox_utils.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

setup_error.rs

chore: move pty and windows sandbox to Rust 2024 (#15954)

2026-03-27 02:31:08 -07:00

setup_main_win.rs

Include legacy deny paths in elevated Windows sandbox setup (#17365)

2026-04-13 10:49:42 -07:00

setup_orchestrator.rs

do not attempt ACLs on installed codex dir (#19214)

2026-04-23 22:21:48 +00:00

spawn_prep.rs

use long-lived sessions for codex sandbox windows (#18953)

2026-04-22 06:39:29 +00:00

ssh_config_dependencies.rs

Filter Windows sandbox roots from SSH config dependencies (#18493)

2026-04-19 14:58:33 -07:00

token.rs

ci: sync Bazel clippy lints and fix uncovered violations (#16351)

2026-03-31 17:09:48 -07:00

winutil.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

workspace_acl.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00