iceweasel-oai e032d338f2 move cap_sid file into ~/.codex so the sandbox cannot overwrite it (#6798) ...

The `cap_sid` file contains the IDs of the two custom SIDs that the
Windows sandbox creates/manages to implement read-only and
workspace-write sandbox policies.

It previously lived in `<cwd>/.codex` which means that the sandbox could
write to it, which could degrade the efficacy of the sandbox. This
change moves it to `~/.codex/` (or wherever `CODEX_HOME` points to) so
that it is outside the workspace.

e032d338f2 · 2025-11-17 15:49:41 -08:00

History

..

debug_sandbox

add codex debug seatbelt --log-denials (#4098)

2025-11-10 22:48:14 +00:00

debug_sandbox.rs

move cap_sid file into ~/.codex so the sandbox cannot overwrite it (#6798)

2025-11-17 15:49:41 -08:00

exit_status.rs

feat: experimental env var: CODEX_SANDBOX_NETWORK_DISABLED (#879)

2025-05-09 18:29:34 -07:00

lib.rs

add codex debug seatbelt --log-denials (#4098)

2025-11-10 22:48:14 +00:00

login.rs

[Auth] Choose which auth storage to use based on config (#5792)

2025-10-27 19:41:49 -07:00

main.rs

fix: update brew auto update version check (#6238)

2025-11-10 09:05:00 -08:00

mcp_cmd.rs

fix: Update the deprecation message to link to the docs (#6211)

2025-11-04 21:02:27 +00:00

wsl_paths.rs

fix(wsl): normalize Windows paths during update (#6086) (#6097)

2025-11-07 14:49:17 -08:00