Eric Traut 5296e06b61 Protect workspace .agents directory in Windows sandbox (#11970) ...

The Mac and Linux implementations of the sandbox recently added write
protections for `.codex` and `.agents` subdirectories in all writable
roots. When adding documentation for this, I noticed that this change
was never made for the Windows sandbox.

Summary
- make compute_allow_paths treat .codex/.agents as protected alongside
.git, and cover their behavior in new tests
- wire protect_workspace_agents_dir through the sandbox lib and setup
path to apply deny ACEs when `.agents` exists
- factor shared ACL logic for workspace subdirectories

5296e06b61 · 2026-02-17 09:40:46 -08:00

History

..

src

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00

BUILD.bazel

feat: add support for building with Bazel (#8875)

2026-01-09 11:09:43 -08:00

build.rs

Elevated Sandbox 2 (#7792)

2025-12-10 21:23:16 -08:00

Cargo.toml

fix: handle utf-8 in windows sandbox logs (#8647)

2026-01-26 15:11:27 -08:00

codex-windows-sandbox-setup.manifest

Elevated Sandbox 2 (#7792)

2025-12-10 21:23:16 -08:00

sandbox_smoketests.py

smoketest for browser vuln, rough draft of Windows security doc (#6822)

2025-11-18 16:43:34 -08:00