iceweasel-oaiandGitHub 0e4adcd760 use machine scope instead of user scope for dpapi. (#9713) ...

This fixes a bug where the elevated sandbox setup encrypts sandbox user
passwords as an admin user, but normal command execution attempts to
decrypt them as a different user.

Machine scope allows all users to encyrpt/decrypt

this PR also moves the encrypted file to a different location
.codex/.sandbox-secrets which the sandbox users cannot read.

2026-01-22 16:40:13 -08:00

..

bin

Elevated Sandbox 3 (#7809)

2025-12-11 13:51:27 -08:00

acl.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

allow.rs

fix(windows-sandbox): deny .git file entries under writable roots (#9314)

2026-01-20 13:59:59 -08:00

audit.rs

fix(windows-sandbox): parse PATH list entries for audit roots (#9319)

2026-01-20 14:00:27 -08:00

cap.rs

bug fixes and perf improvements for elevated sandbox setup (#8094)

2025-12-16 09:48:29 -08:00

command_runner_win.rs

best effort to "hide" Sandbox users (#8492)

2026-01-05 12:29:10 -08:00

cwd_junction.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

dpapi.rs

use machine scope instead of user scope for dpapi. (#9713)

2026-01-22 16:40:13 -08:00

elevated_impl.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

env.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

firewall.rs

better idempotency for creating/updating firewall rules during setup. (#8686)

2026-01-05 10:42:33 -08:00

hide_users.rs

best effort to "hide" Sandbox users (#8492)

2026-01-05 12:29:10 -08:00

identity.rs

Elevated sandbox NUX (#8789)

2026-01-08 16:23:06 -08:00

lib.rs

use machine scope instead of user scope for dpapi. (#9713)

2026-01-22 16:40:13 -08:00

logging.rs

Elevated Sandbox 1 (#7788)

2025-12-09 19:00:33 -08:00

policy.rs

feat: introduce ExternalSandbox policy (#8290)

2025-12-18 17:02:03 -08:00

process.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

read_acl_mutex.rs

speed and reliability improvements for setting reads ACLs (#8216)

2025-12-17 15:27:52 -08:00

sandbox_users.rs

use machine scope instead of user scope for dpapi. (#9713)

2026-01-22 16:40:13 -08:00

setup_main_win.rs

use machine scope instead of user scope for dpapi. (#9713)

2026-01-22 16:40:13 -08:00

setup_orchestrator.rs

use machine scope instead of user scope for dpapi. (#9713)

2026-01-22 16:40:13 -08:00

token.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

winutil.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00